@finchtech/cli 0.3.9 → 0.4.1

package/dist/finch.js

@@ -1,10 +1,17 @@
 #!/usr/bin/env node
+import { createRequire as createBundleRequire } from 'node:module'; const require = createBundleRequire(import.meta.url);
 var __create = Object.create;
 var __defProp = Object.defineProperty;
 var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
 var __getOwnPropNames = Object.getOwnPropertyNames;
 var __getProtoOf = Object.getPrototypeOf;
 var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __require = /* @__PURE__ */ ((x2) => typeof require !== "undefined" ? require : typeof Proxy !== "undefined" ? new Proxy(x2, {
+  get: (a, b) => (typeof require !== "undefined" ? require : a)[b]
+}) : x2)(function(x2) {
+  if (typeof require !== "undefined") return require.apply(this, arguments);
+  throw Error('Dynamic require of "' + x2 + '" is not supported');
+});
 var __esm = (fn, res, err2) => function __init() {
   if (err2) throw err2[0];
   try {
@@ -13,7 +20,7 @@ var __esm = (fn, res, err2) => function __init() {
     throw err2 = [e], e;
   }
 };
-var __commonJS = (cb, mod2) => function __require() {
+var __commonJS = (cb, mod2) => function __require2() {
   try {
     return mod2 || (0, cb[__getOwnPropNames(cb)[0]])((mod2 = { exports: {} }).exports, mod2), mod2.exports;
   } catch (e) {
@@ -3315,8 +3322,8 @@ var require_utils = __commonJS({
     var HOST_DELIMS = { "@": "%40", "/": "%2F", "?": "%3F", "#": "%23", ":": "%3A" };
     var HOST_DELIM_RE = /[@/?#:]/g;
     var HOST_DELIM_NO_COLON_RE = /[@/?#]/g;
-    function reescapeHostDelimiters(host, isIP) {
-      const re = isIP ? HOST_DELIM_NO_COLON_RE : HOST_DELIM_RE;
+    function reescapeHostDelimiters(host, isIP2) {
+      const re = isIP2 ? HOST_DELIM_NO_COLON_RE : HOST_DELIM_RE;
       re.lastIndex = 0;
       return host.replace(re, (ch) => HOST_DELIMS[ch]);
     }
@@ -3805,7 +3812,7 @@ var require_fast_uri = __commonJS({
         fragment: void 0
       };
       let malformedAuthorityOrPort = false;
-      let isIP = false;
+      let isIP2 = false;
       if (options.reference === "suffix") {
         if (options.scheme) {
           uri = options.scheme + ":" + uri;
@@ -3854,9 +3861,9 @@ var require_fast_uri = __commonJS({
           if (ipv4result === false) {
             const ipv6result = normalizeIPv6(parsed2.host);
             parsed2.host = ipv6result.host.toLowerCase();
-            isIP = ipv6result.isIPV6;
+            isIP2 = ipv6result.isIPV6;
           } else {
-            isIP = true;
+            isIP2 = true;
           }
         }
         if (parsed2.scheme === void 0 && parsed2.userinfo === void 0 && parsed2.host === void 0 && parsed2.port === void 0 && parsed2.query === void 0 && !parsed2.path) {
@@ -3873,7 +3880,7 @@ var require_fast_uri = __commonJS({
         }
         const schemeHandler = getSchemeHandler(options.scheme || parsed2.scheme);
         if (!options.unicodeSupport && (!schemeHandler || !schemeHandler.unicodeSupport)) {
-          if (parsed2.host && (options.domainHost || schemeHandler && schemeHandler.domainHost) && isIP === false && nonSimpleDomain(parsed2.host)) {
+          if (parsed2.host && (options.domainHost || schemeHandler && schemeHandler.domainHost) && isIP2 === false && nonSimpleDomain(parsed2.host)) {
             try {
               parsed2.host = new URL("http://" + parsed2.host).hostname;
             } catch (e) {
@@ -3887,7 +3894,7 @@ var require_fast_uri = __commonJS({
               parsed2.scheme = unescape(parsed2.scheme);
             }
             if (parsed2.host !== void 0) {
-              parsed2.host = reescapeHostDelimiters(unescape(parsed2.host), isIP);
+              parsed2.host = reescapeHostDelimiters(unescape(parsed2.host), isIP2);
             }
           }
           if (parsed2.path) {
@@ -6606,6 +6613,66 @@ var require_ajv = __commonJS({
   }
 });
 
+// package.json
+var package_default;
+var init_package = __esm({
+  "package.json"() {
+    package_default = {
+      name: "@finchtech/cli",
+      version: "0.4.1",
+      description: "Finch Agent CLI for wallet-owned marketplace and MCP workflows.",
+      type: "module",
+      bin: {
+        finch: "dist/finch.js",
+        finchtech: "dist/finch.js"
+      },
+      files: [
+        "dist/finch.js",
+        "README.md",
+        "THIRD_PARTY_LICENSES.txt"
+      ],
+      engines: {
+        node: ">=20"
+      },
+      publishConfig: {
+        access: "public"
+      },
+      repository: {
+        type: "git",
+        url: "git+https://github.com/FinchipAI/Finch-Site.git",
+        directory: "apps/cli"
+      },
+      homepage: "https://www.finchtech.ai",
+      scripts: {
+        build: `esbuild src/bootstrap.ts --bundle --platform=node --format=esm --target=node20 --outfile=dist/finch.js --banner:js="import { createRequire as createBundleRequire } from 'node:module'; const require = createBundleRequire(import.meta.url);"`,
+        check: "pnpm lint && pnpm typecheck && pnpm test && pnpm build",
+        lint: "eslint src vitest.config.ts eslint.config.mjs",
+        prepack: "pnpm build",
+        test: "vitest run",
+        typecheck: "tsc --noEmit"
+      },
+      devDependencies: {
+        "@eslint/js": "9.39.2",
+        "@finch/agent-market-contracts": "workspace:*",
+        "@finch/deployment-manifest": "workspace:*",
+        "@finch/skill-content": "workspace:*",
+        "@finch/skill-market-contracts": "workspace:*",
+        "@finch/task-market-contracts": "workspace:*",
+        "@types/cross-spawn": "6.0.6",
+        "@types/node": "20.19.30",
+        ajv: "8.20.0",
+        "cross-spawn": "7.0.6",
+        esbuild: "0.28.2",
+        eslint: "9.39.2",
+        typescript: "5.9.3",
+        "typescript-eslint": "8.67.0",
+        viem: "2.55.15",
+        vitest: "4.1.10"
+      }
+    };
+  }
+});
+
 // src/state.ts
 import { execFile } from "node:child_process";
 import { constants } from "node:fs";
@@ -7086,7 +7153,7 @@ function localFailureMessage(error51) {
   }
   return "Command input does not match the expected schema. Check finch help for this command.";
 }
-var CliAuthorityError, CliProductionUnavailableError, BrowserOpenError, PUBLIC_RECOVERY_COMMAND, CliRecoveryBlockedError, CliSkillSourceError, CliSkillPresentationStaleError, CliSkillRecoveryUncertainError, CliSkillPublicationError;
+var CliAuthorityError, CliProductionUnavailableError, BrowserOpenError, MCP_AUTHORIZATION_FLOW_GUIDANCE, McpAuthorizationFlowError, PUBLIC_RECOVERY_COMMAND, CliRecoveryBlockedError, CliSkillSourceError, CliSkillPresentationStaleError, CliSkillRecoveryUncertainError, CliSkillPublicationError;
 var init_cli_error = __esm({
   "src/cli-error.ts"() {
     "use strict";
@@ -7112,6 +7179,30 @@ var init_cli_error = __esm({
         this.name = "BrowserOpenError";
       }
     };
+    MCP_AUTHORIZATION_FLOW_GUIDANCE = Object.freeze({
+      login_command_not_started: "The login command after -- could not be started. Check that the MCP client is installed and the command is correct, or use finch mcp authorize --stdin with the URL its native login prints.",
+      request_url_not_found: "The login command did not print a Finch authorization URL in time and was stopped; its callback listener is gone. Start the MCP client native login again, keep it running, and pass the new URL to finch mcp authorize --stdin, or run the command shown on the Finch authorization page.",
+      second_authorization_request: "The login command started a second authorization request, which was not approved and the command was stopped. Start the MCP client native login again.",
+      login_command_failed: "The authorization was approved, but the login command exited unsuccessfully. Read its output above, then start the MCP client native login again.",
+      login_command_timeout: "The authorization was approved and the callback delivered, but the login command did not exit in time and was stopped. Check the MCP client connection; if it is not authorized, start its native login again.",
+      callback_rejected: "The authorization was approved, but the MCP client callback rejected it. Start the MCP client native login again.",
+      callback_delivery_unknown: "The authorization was approved, but whether the MCP client received the callback is unknown. Check the MCP client connection before starting its native login again.",
+      callback_unreachable: "The authorization was approved, but no MCP client callback listener was reachable on this machine. Keep the MCP client native login running on the same machine as Finch CLI and try again.",
+      stdin_invalid: "Pass exactly one Finch authorization URL on standard input, for example printf '%s' '<URL>' | finch mcp authorize --stdin."
+    });
+    McpAuthorizationFlowError = class extends Error {
+      constructor(reason, detail = {}, options) {
+        super("MCP_AUTHORIZATION_FLOW_FAILED", options);
+        this.reason = reason;
+        this.detail = detail;
+        this.name = "McpAuthorizationFlowError";
+        this.guidance = MCP_AUTHORIZATION_FLOW_GUIDANCE[reason];
+      }
+      reason;
+      detail;
+      code = "MCP_AUTHORIZATION_FLOW_FAILED";
+      guidance;
+    };
     PUBLIC_RECOVERY_COMMAND = /^(?:finch purchase (?:submit|recover-approval) [0-9a-f-]+(?: --transaction-hash 0x[0-9a-f]{64})?|finch task recover [0-9a-f-]+ (?:publish|award|reclaim)|finch skill recover (?:publication|intent) [0-9a-f]{64})$/u;
     CliRecoveryBlockedError = class extends Error {
       code = "CLI_RECOVERY_BLOCKED";
@@ -11352,7 +11443,7 @@ async function buildSkillRoot(input) {
     if (contentKey !== null) encrypted[file2.path] = { ciphertext: cid.toString(), plaintextHash: await sha256Hex(file2.content) };
   }
   if (!md) throw new RangeError("SkillRoot primary document is missing.");
-  const manifest4 = jsonBytes({
+  const manifest5 = jsonBytes({
     schemaVersion: "1.0",
     name: input.name,
     skillVersion: String(input.version),
@@ -11361,7 +11452,7 @@ async function buildSkillRoot(input) {
   });
   const root = {
     md,
-    manifest: await put(manifest4),
+    manifest: await put(manifest5),
     entry: { ...md, profile: ENTRY_PROFILE },
     ...Object.keys(files).length ? { files } : {},
     ...input.previousHash === void 0 ? {} : { prev: hashCID(input.previousHash, 113) }
@@ -11375,7 +11466,7 @@ async function buildSkillRoot(input) {
   const proof = {
     scheme: SKILL_ROOT_SCHEME,
     root: toBase64(rootBytes),
-    manifest: toBase64(manifest4),
+    manifest: toBase64(manifest5),
     ...confidentiality === void 0 ? {} : { confidentiality: toBase64(confidentiality) }
   };
   const packageHash = await sha256Hex(rootBytes);
@@ -11412,8 +11503,8 @@ async function verifySkillRootProof(proof, packageHash, version6, previousHash)
   const paths = Object.keys(refs);
   if (paths.length > MAX_SKILL_IMPORT_FILES || paths.some((name) => paths.some((other) => other.startsWith(`${name}/`)))) throw new RangeError("SkillRoot file paths exceed limits or conflict.");
   if (!refs[executable.path]?.equals(executable.cid)) throw new RangeError("SkillRoot entrypoint is outside the committed files.");
-  const manifest4 = await authenticatedJSON(proof.manifest, CID.asCID(root.manifest));
-  if (manifest4.schemaVersion !== "1.0" || typeof manifest4.name !== "string" || typeof manifest4.summary !== "string" || manifest4.skillVersion !== String(version6) || manifest4.entrypoint !== executable.path) throw new RangeError("Invalid SkillRoot manifest.");
+  const manifest5 = await authenticatedJSON(proof.manifest, CID.asCID(root.manifest));
+  if (manifest5.schemaVersion !== "1.0" || typeof manifest5.name !== "string" || typeof manifest5.summary !== "string" || manifest5.skillVersion !== String(version6) || manifest5.entrypoint !== executable.path) throw new RangeError("Invalid SkillRoot manifest.");
   const hashes = /* @__PURE__ */ Object.create(null);
   if (root.confidentiality === void 0) {
     if (proof.confidentiality !== void 0) throw new RangeError("Public SkillRoot declares encrypted transport.");
@@ -11436,8 +11527,8 @@ async function verifySkillRootProof(proof, packageHash, version6, previousHash)
     mdHash: hashes[md.path],
     primaryPath: md.path,
     plaintext: root.confidentiality === void 0,
-    name: manifest4.name,
-    summary: manifest4.summary,
+    name: manifest5.name,
+    summary: manifest5.summary,
     fileHashes: hashes
   };
 }
@@ -11690,8 +11781,8 @@ function buildManifest(entries, presentation, documents) {
     ...normalizedDocuments === void 0 ? {} : { documents: normalizedDocuments }
   };
 }
-function serializeManifest(manifest4) {
-  return new TextEncoder().encode(JSON.stringify(manifest4));
+function serializeManifest(manifest5) {
+  return new TextEncoder().encode(JSON.stringify(manifest5));
 }
 function parseManifest(bytes) {
   let value;
@@ -11713,14 +11804,14 @@ function parseManifest(bytes) {
     return null;
   }
 }
-function packageForVersion(manifest4, version6) {
-  return manifest4.versions.find((entry2) => entry2.version === version6) ?? null;
+function packageForVersion(manifest5, version6) {
+  return manifest5.versions.find((entry2) => entry2.version === version6) ?? null;
 }
-function withVersion(manifest4, entry2) {
-  return buildManifest([...manifest4?.versions ?? [], entry2], manifest4?.presentation, manifest4?.documents);
+function withVersion(manifest5, entry2) {
+  return buildManifest([...manifest5?.versions ?? [], entry2], manifest5?.presentation, manifest5?.documents);
 }
-function withPresentation(manifest4, presentation) {
-  return buildManifest(manifest4.versions, presentation, manifest4.documents);
+function withPresentation(manifest5, presentation) {
+  return buildManifest(manifest5.versions, presentation, manifest5.documents);
 }
 var MAX_SKILL_MANIFEST_BYTES, SKILL_MANIFEST_SCHEME, SKILL_DETAIL_KINDS, DETAIL_MEDIA_TYPES, DETAIL_HASH, DETAIL_ASSET_PATH, DETAIL_IPFS_URI, DETAIL_STORAGE_URI, DETAIL_BUCKET_BY_KIND, DETAIL_MEDIA_HOST;
 var init_manifest = __esm({
@@ -11852,7 +11943,7 @@ function strictObjectSchema(properties, required4 = Object.keys(properties)) {
     additionalProperties: false
   });
 }
-var AGENT_MARKET_API_VERSION, MAX_HTTP_ARTIFACT_BYTES, MAX_MCP_ARTIFACT_BYTES, MAX_CLI_CREDENTIAL_BYTES, integrationFamilyValues, canonicalUuidPattern, canonicalUuidSchema, positiveRevisionSchema, nonNegativeGenerationSchema, positiveIntegerStringSchema, hex32Schema, evmAddressSchema, evmAddressInputSchema, canonicalSecondTimestampSchema, IDEMPOTENCY_KEY_PATTERN, UUID_PATTERN, emptyStrictObjectSchema, idempotencyHeaderSchema;
+var AGENT_MARKET_API_VERSION, MAX_HTTP_ARTIFACT_BYTES, MAX_MCP_ARTIFACT_BYTES, MAX_CLI_CREDENTIAL_BYTES, integrationFamilyValues, canonicalUuidPattern, canonicalUuidSchema, positiveRevisionSchema, nonNegativeGenerationSchema, positiveIntegerStringSchema, hex32Schema, evmAddressSchema, evmAddressInputSchema, canonicalSecondTimestampSchema, IDEMPOTENCY_KEY_PATTERN, UUID_PATTERN, emptyStrictObjectSchema, jsonValueTypesSchema, idempotencyHeaderSchema;
 var init_common2 = __esm({
   "../../packages/agent-market-contracts/src/v1/common.ts"() {
     "use strict";
@@ -11903,6 +11994,16 @@ var init_common2 = __esm({
     IDEMPOTENCY_KEY_PATTERN = /^[\x21-\x7e]{1,160}$/u;
     UUID_PATTERN = new RegExp(canonicalUuidPattern, "u");
     emptyStrictObjectSchema = strictObjectSchema({}, []);
+    jsonValueTypesSchema = Object.freeze({
+      anyOf: Object.freeze([
+        Object.freeze({ type: "object", additionalProperties: true }),
+        Object.freeze({ type: "array", items: true }),
+        Object.freeze({ type: "string" }),
+        Object.freeze({ type: "number" }),
+        Object.freeze({ type: "boolean" }),
+        Object.freeze({ type: "null" })
+      ])
+    });
     idempotencyHeaderSchema = Object.freeze({
       type: "string",
       minLength: 1,
@@ -12571,7 +12672,7 @@ function decodeAgentCliMcpAuthorizationRequest(requestToken) {
   }
   return requestUrl;
 }
-var booleanSchema, timestampSchema, agentCliMcpAuthorizationRequestTokenPrefix, agentCliMcpAuthorizationRequestMaximumUrlBytes, agentCliMcpAuthorizationRequestMaximumPayloadCharacters, base64UrlAlphabet, AGENT_CLI_MCP_AUTHORIZATION_REQUEST_TOKEN, LOCAL_SIGNING_ABANDON_CONTRACT, localSigningAbandonReceiptSchema, authorizationBase, browserAuthorizationBase, signingStatusSchema, agentCliSigningIntentSchema, browserPublicationSigningIntentSchema, browserPurchaseSigningIntentSchema, agentCliSigningApproveRequestSchema, agentCliSigningDenyRequestSchema, agentCliSigningDecisionResponseSchema, agentCliCredentialClaimSchema, agentCliCredentialSetupSchema, agentCliCredentialFulfillmentReceiptSchema, CLI_AGENTON_CREDENTIAL_MATERIAL_DOWNLOAD_CONTRACT, AGENT_CLI_V1_HTTP_OPERATIONS, AGENT_CLI_OUTPUT_CONTRACT, agentCliErrorEnvelopeSchema, cliHttpErrorCodes, agentCliLocalErrorCodes, nullableCliStringSchema, cliLocalErrorEnvelopeSchema, AGENT_CLI_RECOVERY_CONTRACT;
+var booleanSchema, timestampSchema, agentCliMcpAuthorizationRequestTokenPrefix, agentCliMcpAuthorizationRequestMaximumUrlBytes, agentCliMcpAuthorizationRequestMaximumPayloadCharacters, base64UrlAlphabet, AGENT_CLI_MCP_AUTHORIZATION_REQUEST_TOKEN, AGENT_CLI_MCP_AUTHORIZATION_CLIENT, LOCAL_SIGNING_ABANDON_CONTRACT, localSigningAbandonReceiptSchema, authorizationBase, browserAuthorizationBase, signingStatusSchema, agentCliSigningIntentSchema, browserPublicationSigningIntentSchema, browserPurchaseSigningIntentSchema, agentCliSigningApproveRequestSchema, agentCliSigningDenyRequestSchema, agentCliSigningDecisionResponseSchema, agentCliCredentialClaimSchema, agentCliCredentialSetupSchema, agentCliCredentialFulfillmentReceiptSchema, CLI_AGENTON_CREDENTIAL_MATERIAL_DOWNLOAD_CONTRACT, AGENT_CLI_V1_HTTP_OPERATIONS, AGENT_CLI_OUTPUT_CONTRACT, agentCliErrorEnvelopeSchema, cliHttpErrorCodes, agentCliLocalErrorCodes, nullableCliStringSchema, cliLocalErrorEnvelopeSchema, AGENT_CLI_RECOVERY_CONTRACT;
 var init_agent_cli = __esm({
   "../../packages/agent-market-contracts/src/v1/agent-cli.ts"() {
     "use strict";
@@ -12593,6 +12694,11 @@ var init_agent_cli = __esm({
       maximumUrlBytes: agentCliMcpAuthorizationRequestMaximumUrlBytes,
       shellMetacharacters: false
     });
+    AGENT_CLI_MCP_AUTHORIZATION_CLIENT = Object.freeze({
+      versionHeader: "x-finch-cli-version",
+      minimumVersion: "0.4.0",
+      packageName: "@finchtech/cli"
+    });
     LOCAL_SIGNING_ABANDON_CONTRACT = Object.freeze({
       transport: "local_only",
       networkCalls: 0,
@@ -12821,7 +12927,8 @@ var init_agent_cli = __esm({
     agentCliLocalErrorCodes = Object.freeze([
       ...agentMarketErrorCodes,
       ...cliHttpErrorCodes,
-      "BROWSER_OPEN_FAILED"
+      "BROWSER_OPEN_FAILED",
+      "MCP_AUTHORIZATION_FLOW_FAILED"
     ]);
     nullableCliStringSchema = { type: ["string", "null"] };
     cliLocalErrorEnvelopeSchema = strictObjectSchema({
@@ -13636,6 +13743,137 @@ var init_artifacts = __esm({
   }
 });
 
+// ../../packages/agent-market-contracts/src/v1/transfers.ts
+function handoff(method2, body) {
+  return strictObjectSchema({
+    method: { const: method2, description: `HTTP method for the transfer (${method2}).` },
+    url: { type: "string", minLength: 1, maxLength: 2048, description: "Absolute URL to send the transfer request to." },
+    headers: headerMapSchema,
+    body: { const: body, description: "What the request body must be." }
+  });
+}
+var described, nullSchema, nonNegativeIntegerStringSchema, headerMapSchema, MAX_INPUT_ARTIFACT_IDS, inputArtifactIdsSchema, prepareInputArtifactRequestSchema, prepareInputArtifactResponseSchema, artifactDownloadLinkResponseSchema, prepareAvatarUploadResponseSchema, buyerRunStatusFilterValues, buyerRunModeFilterValues, buyerRunsQuerySchema, buyerRunSchema, buyerRunsResponseSchema;
+var init_transfers = __esm({
+  "../../packages/agent-market-contracts/src/v1/transfers.ts"() {
+    "use strict";
+    init_common2();
+    described = (schema5, description) => Object.freeze({ ...schema5, description });
+    nullSchema = Object.freeze({ type: "null" });
+    nonNegativeIntegerStringSchema = Object.freeze({ type: "string", pattern: "^(0|[1-9][0-9]*)$" });
+    headerMapSchema = Object.freeze({
+      type: "object",
+      additionalProperties: { type: "string", minLength: 1, maxLength: 2048 },
+      description: "Send exactly these HTTP headers. Authorization carries a single-purpose transfer capability, not your Finch credential; treat it as a secret and do not log or repeat it."
+    });
+    MAX_INPUT_ARTIFACT_IDS = 32;
+    inputArtifactIdsSchema = Object.freeze({
+      type: "array",
+      minItems: 1,
+      maxItems: MAX_INPUT_ARTIFACT_IDS,
+      uniqueItems: true,
+      items: canonicalUuidSchema,
+      description: "Input files for an Offer that accepts files: artifactIds from agent_market_buyer_input_artifact_prepare whose bytes you uploaded. Finch appends them after your content, as the website does."
+    });
+    prepareInputArtifactRequestSchema = strictObjectSchema({
+      mediaType: {
+        type: "string",
+        minLength: 3,
+        maxLength: 160,
+        pattern: "^[a-z0-9][a-z0-9!#$&^_.+-]*/[a-z0-9][a-z0-9!#$&^_.+-]*$",
+        description: "Media type of the file, for example application/pdf or image/png. Finch checks it against the file bytes."
+      },
+      filename: {
+        type: "string",
+        minLength: 1,
+        maxLength: 200,
+        pattern: "^(?!\\.{1,2}$)(?!.*[\\\\/\\u0000-\\u001f\\u007f]).+$",
+        description: "File name shown to the Agent, without a directory."
+      },
+      byteLength: {
+        type: "integer",
+        minimum: 1,
+        maximum: MAX_HTTP_ARTIFACT_BYTES,
+        description: "Exact size of the file in bytes; the Offer may allow less."
+      }
+    });
+    prepareInputArtifactResponseSchema = strictObjectSchema({
+      artifactId: described(canonicalUuidSchema, "The input file; pass it in inputArtifactIds after the upload succeeds."),
+      expiresAt: described(canonicalSecondTimestampSchema, "Upload before this time; afterwards prepare again."),
+      upload: Object.freeze({
+        ...handoff("POST", "the raw file bytes"),
+        description: "Upload the file bytes once with this HTTP request (for example curl --data-binary @file with every header)."
+      })
+    });
+    artifactDownloadLinkResponseSchema = strictObjectSchema({
+      artifactId: described(canonicalUuidSchema, "The file this link downloads."),
+      expiresAt: described(canonicalSecondTimestampSchema, "The link works until this time; afterwards create another."),
+      download: Object.freeze({
+        ...handoff("GET", "empty"),
+        description: "Download the file bytes with this HTTP request (for example curl -o file with every header)."
+      })
+    });
+    prepareAvatarUploadResponseSchema = strictObjectSchema({
+      expiresAt: described(canonicalSecondTimestampSchema, "Upload before this time; the link works once."),
+      upload: Object.freeze({
+        ...handoff("POST", "multipart/form-data with the avatar file in the form field named file"),
+        description: 'Upload the avatar once with this HTTP request (for example curl -F file=@avatar.mp4 with every header). The response is {"uri","mediaType"}; use the uri as the Agent avatar.'
+      }),
+      accepted: Object.freeze({
+        ...strictObjectSchema({
+          mediaTypes: { type: "array", items: { type: "string" }, description: "Accepted image and video types." },
+          maxImageBytes: described(positiveIntegerStringSchema, "Largest accepted image, in bytes."),
+          maxVideoBytes: described(positiveIntegerStringSchema, "Largest accepted video, in bytes.")
+        }),
+        description: "What the upload accepts."
+      })
+    });
+    buyerRunStatusFilterValues = Object.freeze(["all", "active", "input_required", "completed", "failed"]);
+    buyerRunModeFilterValues = Object.freeze(["all", "conversation_turn", "task", "generation", "direct_api"]);
+    buyerRunsQuerySchema = strictObjectSchema({
+      status: { enum: buyerRunStatusFilterValues, default: "all", description: "Only runs in this state group." },
+      mode: { enum: buyerRunModeFilterValues, default: "all", description: "Only runs of this interaction mode." },
+      cursorCreatedAt: { type: "string", format: "date-time", maxLength: 40, description: "nextCursor.createdAt from the previous page." },
+      cursorInvocationId: described(canonicalUuidSchema, "nextCursor.invocationId from the previous page."),
+      limit: { type: "integer", minimum: 1, maximum: 100, default: 20, description: "Runs per page." }
+    }, []);
+    buyerRunSchema = strictObjectSchema({
+      invocationId: described(canonicalUuidSchema, "Read a conversation or Direct call with agent_market_buyer_invocation_get."),
+      serviceVersionId: described(canonicalUuidSchema, "The Agent version that ran."),
+      agentName: { type: "string", minLength: 1, maxLength: 200, description: "Agent display name." },
+      offerId: { anyOf: [canonicalUuidSchema, nullSchema], description: "AgentOn Offer, or null for a Direct call." },
+      offerName: { anyOf: [{ type: "string", minLength: 1, maxLength: 200 }, nullSchema], description: "Offer display name." },
+      interactionMode: { enum: ["conversation_turn", "task", "generation", "direct_api"], description: "How the run interacts." },
+      status: {
+        enum: ["awaiting_dispatch", "dispatching", "submitted", "working", "input_required", "completed", "failed", "canceled", "expired"],
+        description: "Current run state."
+      },
+      conversationId: { anyOf: [canonicalUuidSchema, nullSchema], description: "Conversation of a P1 run; pass it to start the next turn." },
+      taskId: { anyOf: [canonicalUuidSchema, nullSchema], description: "Task of a P2/P3 run; read it with agent_market_buyer_task_get." },
+      requestSummary: { type: "string", minLength: 1, maxLength: 500, description: "Short summary of what was asked." },
+      resultSummary: { anyOf: [{ type: "string", maxLength: 500 }, nullSchema], description: "Short summary of the result so far." },
+      fundingSource: {
+        anyOf: [{ enum: ["merchant_self_test", "administrator_test", "sponsored", "promotion", "paid"] }, nullSchema],
+        description: "The allowance the run reserved."
+      },
+      reservedCallRightUnits: described(nonNegativeIntegerStringSchema, "Call-right units the run reserved."),
+      artifactCount: { type: "integer", minimum: 0, description: "Output files the run published." },
+      createdAt: { type: "string", format: "date-time", description: "When the run started." },
+      updatedAt: { type: "string", format: "date-time", description: "When the run last changed." },
+      completedAt: { anyOf: [{ type: "string", format: "date-time" }, nullSchema], description: "When the run finished, if it did." }
+    });
+    buyerRunsResponseSchema = strictObjectSchema({
+      items: { type: "array", maxItems: 100, items: buyerRunSchema, description: "Runs of this account, newest first." },
+      nextCursor: {
+        anyOf: [strictObjectSchema({
+          createdAt: { type: "string", format: "date-time", description: "Pass as cursorCreatedAt." },
+          invocationId: described(canonicalUuidSchema, "Pass as cursorInvocationId.")
+        }), nullSchema],
+        description: "Cursor for the next page, or null at the end."
+      }
+    });
+  }
+});
+
 // ../../packages/agent-market-contracts/src/v1/buyer.ts
 function supplementalQuestionMetadata(maxTextLength) {
   return {
@@ -13652,30 +13890,51 @@ function supplementalQuestionMetadata(maxTextLength) {
     }
   };
 }
-function taskMutationReceipt(status) {
-  return strictObjectSchema({
+function taskMutationReceiptProperties(status) {
+  return {
     operationId: canonicalUuidSchema,
     taskId: canonicalUuidSchema,
     status: { const: status },
     taskRevision: positiveRevisionSchema,
     etag: taskStrongEtagSchema,
     replayed: booleanSchema2
-  });
+  };
+}
+function taskMutationReceipt(status) {
+  return strictObjectSchema(taskMutationReceiptProperties(status));
 }
-var booleanSchema2, jsonValueSchema, nullSchema, feeBpsCapSchema, createPurchaseIntentRequestSchema, purchaseIntentAcceptedSchema, PURCHASE_FEE_DECISION_CONTRACT, feeSnapshotCommon, purchaseFeeDecisionSnapshotSchema, PURCHASE_LIFECYCLE_CONTRACT, FINANCIAL_AUTHORIZATION_CONTRACT, nonNegativeIntegerStringSchema, callRightPurchaseBatchSchema, callRightsListResponseSchema, CALL_RIGHTS_PAGE_CONTRACT, invocationStartRequestSchema, invocationContinueRequestSchema, p1InvocationAcceptedSchema, directInvocationAcceptedSchema, supplementalQuestionOptionSchema, p1QuestionSchema, p1QuestionsSchema, p1AwaitingCompletionQuestionsSchema, taskQuestionSchema, taskQuestionsSchema, closedPublicFailureSchema, timeoutFailureSchema, invocationCommon, p1InvocationResponseSchema, directInvocationCommon, directPublicFailureSchema, directInvocationResponseSchema, DIRECT_INVOCATION_READ_CONTRACT, invocationResponseSchema, createTaskRequestSchema, TASK_QUANTITY_AUTHORITY_CONTRACT, taskCreateAcceptedSchema, taskStrongEtagSchema, taskInputAcceptedSchema, taskCancelAcceptedSchema, taskCommon, buyerOutputArtifactSchema, buyerOutputArtifactsSchema, taskResponseSchema, BUYER_AGENTON_RECOVERY_CONTRACT, appendTaskInputRequestSchema, cancelTaskRequestSchema, directInvocationRequestSchema, TASK_COMPLETED_CANONICALIZATION;
+var booleanSchema2, jsonValueSchema, nullSchema2, agentOnInitialInputSchema, agentOnFollowUpContentSchema, feeBpsCapSchema, createPurchaseIntentRequestSchema, purchaseIntentAcceptedSchema, PURCHASE_FEE_DECISION_CONTRACT, feeSnapshotCommon, purchaseFeeDecisionSnapshotSchema, PURCHASE_LIFECYCLE_CONTRACT, FINANCIAL_AUTHORIZATION_CONTRACT, nonNegativeIntegerStringSchema2, callRightPurchaseBatchSchema, callRightsListResponseSchema, CALL_RIGHTS_PAGE_CONTRACT, CALL_FUNDING_SOURCES, fundingSourceSchema, callEligibilityQuerySchema, described2, callEligibilityResponseSchema, invocationStartRequestSchema, invocationContinueRequestSchema, runtimeHandoffStateSchema, p1InvocationReceiptProperties, p1InvocationReceiptSchema, p1InvocationAcceptedSchema, directInvocationAcceptedSchema, supplementalQuestionOptionSchema, p1QuestionSchema, p1QuestionsSchema, p1AwaitingCompletionQuestionsSchema, taskQuestionSchema, taskQuestionsSchema, closedPublicFailureSchema, timeoutFailureSchema, invocationCommon, p1InvocationResponseSchema, directInvocationCommon, directPublicFailureSchema, directInvocationResponseSchema, DIRECT_INVOCATION_READ_CONTRACT, invocationResponseSchema, createTaskRequestSchema, TASK_QUANTITY_AUTHORITY_CONTRACT, taskCreateReceiptProperties, taskCreateReceiptSchema, taskCreateAcceptedSchema, taskStrongEtagSchema, taskInputReceiptSchema, taskInputAcceptedSchema, taskCommon, buyerOutputArtifactSchema, buyerOutputArtifactsSchema, taskResponseSchema, BUYER_AGENTON_RECOVERY_CONTRACT, appendTaskInputRequestSchema, directInvocationRequestSchema, TASK_COMPLETED_CANONICALIZATION;
 var init_buyer = __esm({
   "../../packages/agent-market-contracts/src/v1/buyer.ts"() {
     "use strict";
     init_common2();
+    init_transfers();
     booleanSchema2 = Object.freeze({ type: "boolean" });
     jsonValueSchema = Object.freeze({
+      ...jsonValueTypesSchema,
       description: "Native JSON value; pass objects and arrays directly, never as JSON-encoded strings. finch-canonical-binary64-v1; at most 65536 UTF-8 bytes, depth 64, and 10000 nodes.",
       "x-finch-canonical-json-codec": "finch-canonical-binary64-v1",
       "x-finch-max-utf8-bytes": 65536,
       "x-finch-max-depth": 64,
       "x-finch-max-nodes": 1e4
     });
-    nullSchema = Object.freeze({ type: "null" });
+    nullSchema2 = Object.freeze({ type: "null" });
+    agentOnInitialInputSchema = Object.freeze({
+      ...jsonValueSchema,
+      description: 'JSON value matching the published inputSchema of the selected Offer. For a content-array schema send {"content":[{"type":"text","text":"..."}]}; for a schema without declared properties send the prompt as a string; otherwise send the structured value the schema describes. Finch validates it against that schema and converts it to Provider content the same way the Finch website does. ' + jsonValueSchema.description
+    });
+    agentOnFollowUpContentSchema = Object.freeze({
+      type: "array",
+      minItems: 1,
+      maxItems: 100,
+      description: "Follow-up content parts sent to the Provider in order. Use text parts for answers and JSON parts for structured data.",
+      items: Object.freeze({
+        oneOf: Object.freeze([
+          strictObjectSchema({ type: Object.freeze({ const: "text" }), text: Object.freeze({ type: "string", minLength: 1, maxLength: 1e4 }) }),
+          strictObjectSchema({ type: Object.freeze({ const: "json" }), json: jsonValueSchema })
+        ])
+      })
+    });
     feeBpsCapSchema = Object.freeze({ type: "integer", minimum: 0, maximum: 1e4 });
     createPurchaseIntentRequestSchema = strictObjectSchema({
       units: positiveIntegerStringSchema,
@@ -13769,18 +14028,18 @@ var init_buyer = __esm({
       configHashEncoding: "0x_64_lowercase_hex",
       mismatchWrites: 0
     });
-    nonNegativeIntegerStringSchema = Object.freeze({ type: "string", pattern: "^(0|[1-9][0-9]*)$" });
+    nonNegativeIntegerStringSchema2 = Object.freeze({ type: "string", pattern: "^(0|[1-9][0-9]*)$" });
     callRightPurchaseBatchSchema = strictObjectSchema({
       purchaseBatchId: canonicalUuidSchema,
       purchasedUnits: positiveIntegerStringSchema,
-      availableUnits: nonNegativeIntegerStringSchema,
-      reservedUnits: nonNegativeIntegerStringSchema,
-      earningPendingUnits: nonNegativeIntegerStringSchema,
+      availableUnits: nonNegativeIntegerStringSchema2,
+      reservedUnits: nonNegativeIntegerStringSchema2,
+      earningPendingUnits: nonNegativeIntegerStringSchema2,
       purchasedAt: canonicalSecondTimestampSchema
     });
     callRightsListResponseSchema = strictObjectSchema({
       items: { type: "array", maxItems: 100, items: callRightPurchaseBatchSchema },
-      nextCursor: { anyOf: [canonicalUuidSchema, nullSchema] }
+      nextCursor: { anyOf: [canonicalUuidSchema, nullSchema2] }
     });
     CALL_RIGHTS_PAGE_CONTRACT = Object.freeze({
       cursor: "exclusive_purchase_batch_uuid",
@@ -13789,17 +14048,77 @@ var init_buyer = __esm({
       cursorAuthority: "same_actor_account_environment_and_requested_version",
       invalidOrForeignCursorError: "AGENT_MARKET_RESOURCE_NOT_FOUND"
     });
+    CALL_FUNDING_SOURCES = Object.freeze([
+      "merchant_self_test",
+      "administrator_test",
+      "sponsored",
+      "promotion",
+      "paid"
+    ]);
+    fundingSourceSchema = Object.freeze({
+      anyOf: [{ enum: CALL_FUNDING_SOURCES }, nullSchema2],
+      description: "The allowance this call reserved: merchant_self_test (owner test of a contract-tested Agent, free), promotion (free promotional operation), paid (purchased Call Rights), or administrator_test/sponsored (Finch-funded). A failed call releases what it reserved."
+    });
+    callEligibilityQuerySchema = strictObjectSchema({
+      offerId: { ...canonicalUuidSchema, description: "AgentOn offer to check. Pass either offerId or versionId, not both." },
+      versionId: { ...canonicalUuidSchema, description: "Direct API service version to check. Pass either offerId or versionId, not both." },
+      quantity: {
+        type: "integer",
+        minimum: 1,
+        maximum: 2147483647,
+        default: 1,
+        description: "Units of work for a generation offer; 1 for conversation, task, and Direct calls."
+      }
+    }, []);
+    described2 = (schema5, description) => Object.freeze({ ...schema5, description });
+    callEligibilityResponseSchema = strictObjectSchema({
+      serviceVersionId: described2(canonicalUuidSchema, "Service version the call would run on."),
+      offerId: { anyOf: [canonicalUuidSchema, nullSchema2], description: "The checked AgentOn offer, or null for a Direct API version." },
+      quantity: { type: "integer", minimum: 1, maximum: 2147483647, description: "The checked quantity." },
+      requiredUnits: described2(positiveIntegerStringSchema, "Call-right units a paid call would reserve, as a decimal integer string."),
+      fundingSource: {
+        enum: ["merchant_self_test", "promotion", "paid", "insufficient"],
+        description: "What the next call would use: merchant_self_test and promotion are free; paid consumes requiredUnits purchased call rights; insufficient means call rights must be purchased first."
+      },
+      merchantSelfTest: described2(booleanSchema2, "True when the caller owns this contract-tested agent, so calls are a free owner self-test."),
+      promotion: {
+        anyOf: [strictObjectSchema({
+          availableOperations: described2(nonNegativeIntegerStringSchema2, "Free calls usable now: the lower of personalRemaining and dailyRemaining."),
+          personalRemaining: described2(nonNegativeIntegerStringSchema2, "Free calls left for this account in the promotion."),
+          expiresAt: described2(canonicalSecondTimestampSchema, "When the promotion ends."),
+          dailyRemaining: { anyOf: [nonNegativeIntegerStringSchema2, nullSchema2], description: "Free calls left today for this agent across all buyers, or null when there is no daily limit." },
+          dailyResetsAt: { anyOf: [canonicalSecondTimestampSchema, nullSchema2], description: "When the daily limit resets, or null when there is no daily limit." }
+        }), nullSchema2],
+        description: "The active free promotion for this agent, or null when there is none."
+      },
+      paid: Object.freeze({
+        ...strictObjectSchema({
+          availableUnits: described2(nonNegativeIntegerStringSchema2, "Purchased call-right units available now."),
+          reservedUnits: described2(nonNegativeIntegerStringSchema2, "Purchased call-right units held by calls still running.")
+        }),
+        description: "Purchased call rights for this service version."
+      })
+    });
     invocationStartRequestSchema = strictObjectSchema({
-      content: jsonValueSchema,
-      taskCompleted: booleanSchema2
+      content: agentOnInitialInputSchema,
+      taskCompleted: booleanSchema2,
+      inputArtifactIds: inputArtifactIdsSchema,
+      conversationId: {
+        ...canonicalUuidSchema,
+        description: "Start the next paid turn of this earlier conversation (from a previous invocation) instead of a new conversation. Its last turn must be finished, and it must be with the same Agent."
+      }
     }, ["content"]);
     invocationContinueRequestSchema = strictObjectSchema({
       conversationId: canonicalUuidSchema,
       expectedTurnId: canonicalUuidSchema,
-      content: jsonValueSchema,
+      content: agentOnFollowUpContentSchema,
       taskCompleted: booleanSchema2
     }, ["conversationId", "expectedTurnId", "content"]);
-    p1InvocationAcceptedSchema = strictObjectSchema({
+    runtimeHandoffStateSchema = Object.freeze({
+      enum: Object.freeze(["acknowledged", "uncertain"]),
+      description: "acknowledged: the runtime received the work. uncertain: the work is accepted and durable, but runtime receipt was not confirmed; Finch retries delivery automatically, so read it by its identifiers and do not resubmit with a new Idempotency-Key."
+    });
+    p1InvocationReceiptProperties = {
       operationId: {
         ...canonicalUuidSchema,
         description: "Durable admission identity; recover its current P1 resource identity with agent_market_operation_get."
@@ -13812,6 +14131,11 @@ var init_buyer = __esm({
       turnId: canonicalUuidSchema,
       status: { const: "awaiting_dispatch" },
       replayed: booleanSchema2
+    };
+    p1InvocationReceiptSchema = strictObjectSchema(p1InvocationReceiptProperties);
+    p1InvocationAcceptedSchema = strictObjectSchema({
+      ...p1InvocationReceiptProperties,
+      handoffState: runtimeHandoffStateSchema
     });
     directInvocationAcceptedSchema = strictObjectSchema({
       operationId: canonicalUuidSchema,
@@ -13858,12 +14182,12 @@ var init_buyer = __esm({
         strictObjectSchema({ code: { const: "AGENT_MARKET_RUNTIME_REJECTED" }, message: { const: "The runtime rejected the request." } }),
         strictObjectSchema({ code: { const: "AGENT_MARKET_RUNTIME_UNAVAILABLE" }, message: { const: "The runtime is temporarily unavailable." } }),
         strictObjectSchema({ code: { const: "AGENT_MARKET_RUNTIME_TIMEOUT" }, message: { const: "The runtime did not complete before the deadline." } }),
-        strictObjectSchema({ code: { const: "AGENT_MARKET_INTERNAL_ERROR" }, message: nullSchema })
+        strictObjectSchema({ code: { const: "AGENT_MARKET_INTERNAL_ERROR" }, message: nullSchema2 })
       ]
     });
     timeoutFailureSchema = strictObjectSchema({
       code: { const: "AGENT_MARKET_RUNTIME_TIMEOUT" },
-      message: nullSchema
+      message: nullSchema2
     });
     invocationCommon = {
       operationId: canonicalUuidSchema,
@@ -13871,15 +14195,16 @@ var init_buyer = __esm({
       conversationId: canonicalUuidSchema,
       currentTurnId: canonicalUuidSchema,
       createdAt: canonicalSecondTimestampSchema,
-      updatedAt: canonicalSecondTimestampSchema
+      updatedAt: canonicalSecondTimestampSchema,
+      fundingSource: fundingSourceSchema
     };
     p1InvocationResponseSchema = Object.freeze({
       oneOf: [
         ...["awaiting_dispatch", "dispatching"].map((status) => strictObjectSchema({
           ...invocationCommon,
           status: { const: status },
-          output: nullSchema,
-          error: nullSchema
+          output: nullSchema2,
+          error: nullSchema2
         })),
         strictObjectSchema({
           ...invocationCommon,
@@ -13893,18 +14218,18 @@ var init_buyer = __esm({
               })
             ]
           }),
-          error: nullSchema
+          error: nullSchema2
         }),
         strictObjectSchema({
           ...invocationCommon,
           status: { const: "completed" },
           output: jsonValueSchema,
-          error: nullSchema
+          error: nullSchema2
         }),
         strictObjectSchema({
           ...invocationCommon,
           status: { const: "failed" },
-          output: nullSchema,
+          output: nullSchema2,
           error: closedPublicFailureSchema
         })
       ]
@@ -13913,7 +14238,8 @@ var init_buyer = __esm({
       operationId: canonicalUuidSchema,
       invocationId: canonicalUuidSchema,
       createdAt: canonicalSecondTimestampSchema,
-      updatedAt: canonicalSecondTimestampSchema
+      updatedAt: canonicalSecondTimestampSchema,
+      fundingSource: fundingSourceSchema
     };
     directPublicFailureSchema = Object.freeze({
       oneOf: [
@@ -13925,7 +14251,7 @@ var init_buyer = __esm({
           code: { const: "AGENT_MARKET_RUNTIME_UNAVAILABLE" },
           message: { const: "The runtime is temporarily unavailable." }
         }),
-        strictObjectSchema({ code: { const: "AGENT_MARKET_INTERNAL_ERROR" }, message: nullSchema })
+        strictObjectSchema({ code: { const: "AGENT_MARKET_INTERNAL_ERROR" }, message: nullSchema2 })
       ]
     });
     directInvocationResponseSchema = Object.freeze({
@@ -13933,19 +14259,19 @@ var init_buyer = __esm({
         ...["awaiting_dispatch", "dispatching"].map((status) => strictObjectSchema({
           ...directInvocationCommon,
           status: { const: status },
-          output: nullSchema,
-          error: nullSchema
+          output: nullSchema2,
+          error: nullSchema2
         })),
         strictObjectSchema({
           ...directInvocationCommon,
           status: { const: "completed" },
           output: jsonValueSchema,
-          error: nullSchema
+          error: nullSchema2
         }),
         strictObjectSchema({
           ...directInvocationCommon,
           status: { const: "failed" },
-          output: nullSchema,
+          output: nullSchema2,
           error: directPublicFailureSchema
         })
       ]
@@ -13989,7 +14315,8 @@ var init_buyer = __esm({
     });
     createTaskRequestSchema = strictObjectSchema({
       quantity: { type: "integer", minimum: 1, maximum: 2147483647 },
-      content: jsonValueSchema
+      content: agentOnInitialInputSchema,
+      inputArtifactIds: inputArtifactIdsSchema
     }, ["quantity", "content"]);
     TASK_QUANTITY_AUTHORITY_CONTRACT = Object.freeze({
       transport: "positive_int32",
@@ -13999,7 +14326,7 @@ var init_buyer = __esm({
       p3BoundsAuthority: "database_offer_and_artifact_business_rules",
       transportDoesNotApplyGlobal100Cap: true
     });
-    taskCreateAcceptedSchema = strictObjectSchema({
+    taskCreateReceiptProperties = {
       operationId: {
         ...canonicalUuidSchema,
         description: "Durable admission identity; recover its current P2/P3 resource identity with agent_market_operation_get."
@@ -14010,6 +14337,11 @@ var init_buyer = __esm({
       },
       status: { const: "submitted" },
       replayed: booleanSchema2
+    };
+    taskCreateReceiptSchema = strictObjectSchema(taskCreateReceiptProperties);
+    taskCreateAcceptedSchema = strictObjectSchema({
+      ...taskCreateReceiptProperties,
+      handoffState: runtimeHandoffStateSchema
     });
     taskStrongEtagSchema = Object.freeze({
       type: "string",
@@ -14017,15 +14349,19 @@ var init_buyer = __esm({
       "x-finch-resource-id-field": "taskId",
       "x-finch-revision-field": "taskRevision"
     });
-    taskInputAcceptedSchema = taskMutationReceipt("working");
-    taskCancelAcceptedSchema = taskMutationReceipt("canceled");
+    taskInputReceiptSchema = taskMutationReceipt("working");
+    taskInputAcceptedSchema = strictObjectSchema({
+      ...taskMutationReceiptProperties("working"),
+      handoffState: runtimeHandoffStateSchema
+    });
     taskCommon = {
       operationId: canonicalUuidSchema,
       taskId: canonicalUuidSchema,
       taskRevision: positiveRevisionSchema,
       etag: taskStrongEtagSchema,
       createdAt: canonicalSecondTimestampSchema,
-      updatedAt: canonicalSecondTimestampSchema
+      updatedAt: canonicalSecondTimestampSchema,
+      fundingSource: fundingSourceSchema
     };
     buyerOutputArtifactSchema = strictObjectSchema({
       artifactId: canonicalUuidSchema,
@@ -14055,38 +14391,38 @@ var init_buyer = __esm({
         ...["submitted", "working"].map((status) => strictObjectSchema({
           ...taskCommon,
           status: { const: status },
-          output: nullSchema,
-          error: nullSchema
+          output: nullSchema2,
+          error: nullSchema2
         })),
         strictObjectSchema({
           ...taskCommon,
           status: { const: "input_required" },
           output: strictObjectSchema({ questions: taskQuestionsSchema }),
-          error: nullSchema
+          error: nullSchema2
         }),
         strictObjectSchema({
           ...taskCommon,
           status: { const: "completed" },
           output: jsonValueSchema,
           artifacts: buyerOutputArtifactsSchema,
-          error: nullSchema
+          error: nullSchema2
         }),
         strictObjectSchema({
           ...taskCommon,
           status: { const: "failed" },
-          output: nullSchema,
+          output: nullSchema2,
           error: closedPublicFailureSchema
         }),
         strictObjectSchema({
           ...taskCommon,
           status: { const: "canceled" },
-          output: nullSchema,
-          error: nullSchema
+          output: nullSchema2,
+          error: nullSchema2
         }),
         strictObjectSchema({
           ...taskCommon,
           status: { const: "expired" },
-          output: nullSchema,
+          output: nullSchema2,
           error: timeoutFailureSchema
         })
       ]
@@ -14105,8 +14441,7 @@ var init_buyer = __esm({
       p1ContinueOperationIdIsGenericRecovery: true,
       missingOrForeignOperationError: "AGENT_MARKET_OPERATION_NOT_FOUND"
     });
-    appendTaskInputRequestSchema = strictObjectSchema({ content: jsonValueSchema });
-    cancelTaskRequestSchema = strictObjectSchema({});
+    appendTaskInputRequestSchema = strictObjectSchema({ content: agentOnFollowUpContentSchema });
     directInvocationRequestSchema = strictObjectSchema({ input: jsonValueSchema });
     TASK_COMPLETED_CANONICALIZATION = Object.freeze({
       omitted: true,
@@ -14122,10 +14457,10 @@ function notRunStage(kind) {
   return strictObjectSchema({
     kind: { const: kind },
     status: { const: "not_run" },
-    httpStatus: nullSchema2,
-    resultCode: nullSchema2,
-    deliveryOutcome: nullSchema2,
-    latencyMs: nullSchema2
+    httpStatus: nullSchema3,
+    resultCode: nullSchema3,
+    deliveryOutcome: nullSchema3,
+    latencyMs: nullSchema3
   });
 }
 function successfulStage(kind, httpStatus) {
@@ -14133,8 +14468,8 @@ function successfulStage(kind, httpStatus) {
     kind: { const: kind },
     status: { const: "success" },
     httpStatus,
-    resultCode: nullSchema2,
-    deliveryOutcome: nullSchema2,
+    resultCode: nullSchema3,
+    deliveryOutcome: nullSchema3,
     latencyMs: boundedLatencySchema
   });
 }
@@ -14142,9 +14477,9 @@ function terminalStage(kind, status, resultCodes) {
   return strictObjectSchema({
     kind: { const: kind },
     status: { const: status },
-    httpStatus: { anyOf: [boundedHttpStatusSchema, nullSchema2] },
+    httpStatus: { anyOf: [boundedHttpStatusSchema, nullSchema3] },
     resultCode: { type: "string", enum: resultCodes },
-    deliveryOutcome: status === "uncertain" ? { const: "unknown" } : { anyOf: [{ const: "not_sent" }, nullSchema2] },
+    deliveryOutcome: status === "uncertain" ? { const: "unknown" } : { anyOf: [{ const: "not_sent" }, nullSchema3] },
     latencyMs: boundedLatencySchema
   });
 }
@@ -14172,11 +14507,11 @@ function systemTerminalVariant(status, reason, preparingAt, executingAt, history
     preparingAt,
     executingAt,
     completedAt: timestampSchema2,
-    suiteResult: nullSchema2,
+    suiteResult: nullSchema3,
     ...history
   });
 }
-var DIRECT_CONNECTION_TEST_SUITE_ID, DIRECT_CONNECTION_TEST_SUITE_VERSION, DIRECT_CONNECTION_TEST_STAGE_KINDS, DIRECT_CONNECTION_TEST_STAGE_STATUSES, DIRECT_CONNECTION_TEST_MAX_LATENCY_MS, DIRECT_CONNECTION_TEST_AGGREGATE_FAILURE_CODES, CONNECTION_TEST_SYSTEM_FAILED_REASONS, CONNECTION_TEST_SYSTEM_UNCERTAIN_REASONS, CONNECTION_TEST_SYSTEM_TERMINAL_REASONS, CONNECTION_TEST_SYSTEM_TERMINAL_REASON_TO_PUBLIC_FAILURE_CODE, CONNECTION_TEST_SYSTEM_TERMINAL_CONTRACT, DIRECT_CONNECTION_TEST_TRANSPORT_RESULT_CODES, DIRECT_CONNECTION_TEST_HEALTH_RESULT_CODES, DIRECT_CONNECTION_TEST_PREFLIGHT_RESULT_CODES, DIRECT_CONNECTION_TEST_INVOCATION_RESULT_CODES, DIRECT_CONNECTION_TEST_INTERNAL_RESULT_CODES, nullSchema2, boundedHttpStatusSchema, successfulHttpStatusSchema, boundedLatencySchema, healthSuccessSchema, healthFailedSchema, healthUncertainSchema, preflightNotRunSchema, preflightSkippedSchema, preflightSuccessSchema, preflightFailedSchema, preflightUncertainSchema, invocationNotRunSchema, invocationSuccessSchema, invocationFailedSchema, invocationUncertainSchema, directConnectionTestHealthStageSchema, directConnectionTestPreflightStageSchema, directConnectionTestInvocationStageSchema, internalResult, onlineInternalResultSchema, failedInternalResultSchemas, uncertainInternalResultSchemas, directConnectionTestInternalResultSchema, DIRECT_CONNECTION_TEST_DIAGNOSTIC_CODES, directConnectionTestDiagnostics, directConnectionTestDiagnosticsResponseSchema, timestampSchema2, systemHealthNotRunMarkerSchema, systemPreflightNotRunMarkerSchema, systemPreflightSkippedMarkerSchema, systemInvocationNotRunMarkerSchema, systemNoPriorFailedHistorySchema, systemHealthPriorFailedHistorySchema, systemPreflightSuccessPriorFailedHistorySchema, systemPreflightSkippedPriorFailedHistorySchema, systemReceiptMissingHistorySchemas, systemFailedReasonSchema, systemFailedHistorySchemas, connectionTestSystemTerminalSchema, PLACEHOLDER_STRINGS, DIRECT_CONNECTION_TEST_SUITE_CONTRACT, AGENTON_CONNECTION_TEST_SUITE_CONTRACT, CONNECTION_TEST_STORAGE_STATE_TO_PUBLIC_STATUS, CONNECTION_TEST_INTERNAL_FAILURE_TO_PUBLIC_FAILURE, OPERATION_STORAGE_KIND_TO_PUBLIC_KIND, CONNECTION_TEST_PUBLIC_PROJECTION_CONTRACT;
+var DIRECT_CONNECTION_TEST_SUITE_ID, DIRECT_CONNECTION_TEST_SUITE_VERSION, DIRECT_CONNECTION_TEST_STAGE_KINDS, DIRECT_CONNECTION_TEST_STAGE_STATUSES, DIRECT_CONNECTION_TEST_MAX_LATENCY_MS, DIRECT_CONNECTION_TEST_AGGREGATE_FAILURE_CODES, CONNECTION_TEST_SYSTEM_FAILED_REASONS, CONNECTION_TEST_SYSTEM_UNCERTAIN_REASONS, CONNECTION_TEST_SYSTEM_TERMINAL_REASONS, CONNECTION_TEST_SYSTEM_TERMINAL_REASON_TO_PUBLIC_FAILURE_CODE, CONNECTION_TEST_SYSTEM_TERMINAL_CONTRACT, DIRECT_CONNECTION_TEST_TRANSPORT_RESULT_CODES, DIRECT_CONNECTION_TEST_HEALTH_RESULT_CODES, DIRECT_CONNECTION_TEST_PREFLIGHT_RESULT_CODES, DIRECT_CONNECTION_TEST_INVOCATION_RESULT_CODES, DIRECT_CONNECTION_TEST_INTERNAL_RESULT_CODES, nullSchema3, boundedHttpStatusSchema, successfulHttpStatusSchema, boundedLatencySchema, healthSuccessSchema, healthFailedSchema, healthUncertainSchema, preflightNotRunSchema, preflightSkippedSchema, preflightSuccessSchema, preflightFailedSchema, preflightUncertainSchema, invocationNotRunSchema, invocationSuccessSchema, invocationFailedSchema, invocationUncertainSchema, directConnectionTestHealthStageSchema, directConnectionTestPreflightStageSchema, directConnectionTestInvocationStageSchema, internalResult, onlineInternalResultSchema, failedInternalResultSchemas, uncertainInternalResultSchemas, directConnectionTestInternalResultSchema, DIRECT_CONNECTION_TEST_DIAGNOSTIC_CODES, directConnectionTestDiagnostics, directConnectionTestDiagnosticsResponseSchema, timestampSchema2, systemHealthNotRunMarkerSchema, systemPreflightNotRunMarkerSchema, systemPreflightSkippedMarkerSchema, systemInvocationNotRunMarkerSchema, systemNoPriorFailedHistorySchema, systemHealthPriorFailedHistorySchema, systemPreflightSuccessPriorFailedHistorySchema, systemPreflightSkippedPriorFailedHistorySchema, systemReceiptMissingHistorySchemas, systemFailedReasonSchema, systemFailedHistorySchemas, connectionTestSystemTerminalSchema, PLACEHOLDER_STRINGS, DIRECT_CONNECTION_TEST_SUITE_CONTRACT, AGENTON_CONNECTION_TEST_SUITE_CONTRACT, CONNECTION_TEST_STORAGE_STATE_TO_PUBLIC_STATUS, CONNECTION_TEST_INTERNAL_FAILURE_TO_PUBLIC_FAILURE, OPERATION_STORAGE_KIND_TO_PUBLIC_KIND, CONNECTION_TEST_PUBLIC_PROJECTION_CONTRACT;
 var init_direct_connection_test = __esm({
   "../../packages/agent-market-contracts/src/v1/direct-connection-test.ts"() {
     "use strict";
@@ -14288,7 +14623,7 @@ var init_direct_connection_test = __esm({
       "network_unavailable",
       "network_failure"
     ]);
-    nullSchema2 = { type: "null" };
+    nullSchema3 = { type: "null" };
     boundedHttpStatusSchema = { type: "integer", minimum: 100, maximum: 599 };
     successfulHttpStatusSchema = { type: "integer", minimum: 200, maximum: 299 };
     boundedLatencySchema = {
@@ -14311,10 +14646,10 @@ var init_direct_connection_test = __esm({
     preflightSkippedSchema = strictObjectSchema({
       kind: { const: "preflight" },
       status: { const: "skipped" },
-      httpStatus: nullSchema2,
-      resultCode: nullSchema2,
-      deliveryOutcome: nullSchema2,
-      latencyMs: nullSchema2
+      httpStatus: nullSchema3,
+      resultCode: nullSchema3,
+      deliveryOutcome: nullSchema3,
+      latencyMs: nullSchema3
     });
     preflightSuccessSchema = successfulStage("preflight", successfulHttpStatusSchema);
     preflightFailedSchema = terminalStage(
@@ -14364,7 +14699,7 @@ var init_direct_connection_test = __esm({
     });
     internalResult = (status, failureCode, health, preflight, invocation) => strictObjectSchema({
       status: { const: status },
-      failureCode: failureCode === null ? nullSchema2 : { const: failureCode },
+      failureCode: failureCode === null ? nullSchema3 : { const: failureCode },
       health,
       preflight,
       invocation
@@ -14436,29 +14771,29 @@ var init_direct_connection_test = __esm({
     });
     directConnectionTestDiagnosticsResponseSchema = Object.freeze({
       oneOf: [
-        directConnectionTestDiagnostics("authorized", nullSchema2, nullSchema2),
-        directConnectionTestDiagnostics("executing", nullSchema2, nullSchema2),
+        directConnectionTestDiagnostics("authorized", nullSchema3, nullSchema3),
+        directConnectionTestDiagnostics("executing", nullSchema3, nullSchema3),
         directConnectionTestDiagnostics(
           "succeeded",
-          nullSchema2,
+          nullSchema3,
           onlineInternalResultSchema
         ),
-        directConnectionTestDiagnostics("failed", nullSchema2, { oneOf: failedInternalResultSchemas }),
+        directConnectionTestDiagnostics("failed", nullSchema3, { oneOf: failedInternalResultSchemas }),
         directConnectionTestDiagnostics("failed", {
           type: "string",
           enum: DIRECT_CONNECTION_TEST_DIAGNOSTIC_CODES.filter(
             (code) => code !== "EXECUTION_RESULT_MISSING"
           )
-        }, nullSchema2),
+        }, nullSchema3),
         directConnectionTestDiagnostics(
           "uncertain",
-          nullSchema2,
+          nullSchema3,
           { oneOf: uncertainInternalResultSchemas }
         ),
         directConnectionTestDiagnostics(
           "uncertain",
           { const: "EXECUTION_RESULT_MISSING" },
-          nullSchema2
+          nullSchema3
         )
       ]
     });
@@ -14481,7 +14816,7 @@ var init_direct_connection_test = __esm({
     });
     systemNoPriorFailedHistorySchema = {
       priorCompletedStages: exactStageTuple([]),
-      activeStage: nullSchema2,
+      activeStage: nullSchema3,
       remainingStages: exactStageTuple([
         systemHealthNotRunMarkerSchema,
         { oneOf: [systemPreflightNotRunMarkerSchema, systemPreflightSkippedMarkerSchema] },
@@ -14490,7 +14825,7 @@ var init_direct_connection_test = __esm({
     };
     systemHealthPriorFailedHistorySchema = {
       priorCompletedStages: exactStageTuple([healthSuccessSchema]),
-      activeStage: nullSchema2,
+      activeStage: nullSchema3,
       remainingStages: exactStageTuple([
         systemPreflightNotRunMarkerSchema,
         systemInvocationNotRunMarkerSchema
@@ -14498,12 +14833,12 @@ var init_direct_connection_test = __esm({
     };
     systemPreflightSuccessPriorFailedHistorySchema = {
       priorCompletedStages: exactStageTuple([healthSuccessSchema, preflightSuccessSchema]),
-      activeStage: nullSchema2,
+      activeStage: nullSchema3,
       remainingStages: exactStageTuple([systemInvocationNotRunMarkerSchema])
     };
     systemPreflightSkippedPriorFailedHistorySchema = {
       priorCompletedStages: exactStageTuple([healthSuccessSchema, preflightSkippedSchema]),
-      activeStage: nullSchema2,
+      activeStage: nullSchema3,
       remainingStages: exactStageTuple([systemInvocationNotRunMarkerSchema])
     };
     systemReceiptMissingHistorySchemas = [
@@ -14545,15 +14880,15 @@ var init_direct_connection_test = __esm({
         systemTerminalVariant(
           "failed",
           systemFailedReasonSchema,
-          nullSchema2,
-          nullSchema2,
+          nullSchema3,
+          nullSchema3,
           systemNoPriorFailedHistorySchema
         ),
         systemTerminalVariant(
           "failed",
           systemFailedReasonSchema,
           timestampSchema2,
-          nullSchema2,
+          nullSchema3,
           systemNoPriorFailedHistorySchema
         ),
         ...systemFailedHistorySchemas.map((history) => systemTerminalVariant(
@@ -15238,17 +15573,17 @@ var init_localization = __esm({
 function signedStatusVariants(kind, denialCode, executionFailureCode, successResult, extra = {}) {
   const base3 = (status) => ({ ...signedBase(kind, status), ...extra });
   return [
-    strictObjectSchema({ ...base3("awaiting_signature"), authorizedAt: nullSchema3, executingAt: nullSchema3, deniedAt: nullSchema3, completedAt: nullSchema3, failureCode: nullSchema3, result: nullSchema3 }),
-    strictObjectSchema({ ...base3("authorized"), authorizedAt: timestampSchema3, executingAt: nullSchema3, deniedAt: nullSchema3, completedAt: nullSchema3, failureCode: nullSchema3, result: nullSchema3 }),
-    strictObjectSchema({ ...base3("executing"), authorizedAt: timestampSchema3, executingAt: timestampSchema3, deniedAt: nullSchema3, completedAt: nullSchema3, failureCode: nullSchema3, result: nullSchema3 }),
-    strictObjectSchema({ ...base3("succeeded"), authorizedAt: timestampSchema3, executingAt: timestampSchema3, deniedAt: nullSchema3, completedAt: timestampSchema3, failureCode: nullSchema3, result: successResult }),
-    strictObjectSchema({ ...base3("failed"), authorizedAt: nullSchema3, executingAt: nullSchema3, deniedAt: nullSchema3, completedAt: timestampSchema3, failureCode: { const: executionFailureCode }, result: nullSchema3 }),
-    strictObjectSchema({ ...base3("failed"), authorizedAt: timestampSchema3, executingAt: nullSchema3, deniedAt: nullSchema3, completedAt: timestampSchema3, failureCode: { const: executionFailureCode }, result: nullSchema3 }),
-    strictObjectSchema({ ...base3("failed"), authorizedAt: timestampSchema3, executingAt: timestampSchema3, deniedAt: nullSchema3, completedAt: timestampSchema3, failureCode: { const: executionFailureCode }, result: nullSchema3 }),
-    strictObjectSchema({ ...base3("denied"), authorizedAt: nullSchema3, executingAt: nullSchema3, deniedAt: timestampSchema3, completedAt: timestampSchema3, failureCode: { const: denialCode }, result: nullSchema3 })
+    strictObjectSchema({ ...base3("awaiting_signature"), authorizedAt: nullSchema4, executingAt: nullSchema4, deniedAt: nullSchema4, completedAt: nullSchema4, failureCode: nullSchema4, result: nullSchema4 }),
+    strictObjectSchema({ ...base3("authorized"), authorizedAt: timestampSchema3, executingAt: nullSchema4, deniedAt: nullSchema4, completedAt: nullSchema4, failureCode: nullSchema4, result: nullSchema4 }),
+    strictObjectSchema({ ...base3("executing"), authorizedAt: timestampSchema3, executingAt: timestampSchema3, deniedAt: nullSchema4, completedAt: nullSchema4, failureCode: nullSchema4, result: nullSchema4 }),
+    strictObjectSchema({ ...base3("succeeded"), authorizedAt: timestampSchema3, executingAt: timestampSchema3, deniedAt: nullSchema4, completedAt: timestampSchema3, failureCode: nullSchema4, result: successResult }),
+    strictObjectSchema({ ...base3("failed"), authorizedAt: nullSchema4, executingAt: nullSchema4, deniedAt: nullSchema4, completedAt: timestampSchema3, failureCode: { const: executionFailureCode }, result: nullSchema4 }),
+    strictObjectSchema({ ...base3("failed"), authorizedAt: timestampSchema3, executingAt: nullSchema4, deniedAt: nullSchema4, completedAt: timestampSchema3, failureCode: { const: executionFailureCode }, result: nullSchema4 }),
+    strictObjectSchema({ ...base3("failed"), authorizedAt: timestampSchema3, executingAt: timestampSchema3, deniedAt: nullSchema4, completedAt: timestampSchema3, failureCode: { const: executionFailureCode }, result: nullSchema4 }),
+    strictObjectSchema({ ...base3("denied"), authorizedAt: nullSchema4, executingAt: nullSchema4, deniedAt: timestampSchema3, completedAt: timestampSchema3, failureCode: { const: denialCode }, result: nullSchema4 })
   ];
 }
-var jsonValueSchema2, jsonSchemaDocumentSchema, nullableRevisionSchema3, nullableUuidSchema2, httpsUrlSchema, agentMarketIpfsUriSchema, nullableIpfsUriSchema, avatarMediaTypeSchema, artifactCountPolicySchema, artifactBatchContractSchema, integrationOptionsResponseSchema, createAgentWithInitialVersionRequestSchema, agentResponseSchema, agentListItemSchema, agentListResponseSchema, agentOnAuditOfferSchema, agentOnAuditReportResponseSchema, versionResponseSchema, replaceVersionAvailabilityRequestSchema, refundCampaignSummarySchema, versionAvailabilityResponseSchema, createAdditionalVersionRequestSchema, beginVersionDraftRequestSchema, beginVersionDraftResponseSchema, abandonVersionDraftRequestSchema, catalogChildRevisionStatusValues, ABANDON_VERSION_DRAFT_CHILD_STATUS_CONTRACT, abandonVersionDraftResponseSchema, agentOnRuntimeRequestSchema, directRuntimeRequestSchema, replaceRuntimeRequestSchema, runtimeResponseSchema, replaceAgentOnRailRequestSchema, agentOnRailResponseSchema, agentOnOfferModeValues, offerConfigurationProperties, createOfferRequestSchema, replaceOfferRequestSchema, offerResponseSchema, offerListResponseSchema, replaceDirectContractRequestSchema, directContractResponseSchema, createCredentialSetupRequestSchema, CREDENTIAL_SETUP_TTL_CONTRACT, credentialSetupBase, agentOnMaterialDownloadActionSchema, directMaterialFulfillmentActionSchema, requiresLocalActionSchema, credentialSetupResponseSchema, AGENTON_PLATFORM_ISSUED_CREDENTIAL_CONTRACT, agentOnConnectionTargetSchema, directConnectionTargetSchema, createConnectionTestRequestSchema, createPublishIntentRequestSchema, createOfferRetirementIntentRequestSchema, publicationIntentResponseSchema, OPERATION_STATUS_CONTRACT, timestampSchema3, nullSchema3, signedBase, publicationOperationResultSchema, localPurchaseOperationResultSchema, localPurchaseChildrenSchema, publicationOperationVariants, localPurchaseOperationVariants, signedOperationResponseSchema, connectionBase, connectionTestResultSchema, connectionOperationVariants, connectionTestOperationResponseSchema, buyerOperationFailureSchema, p1OperationBase, p1OperationVariants, agentOnTaskOperationBase, agentOnTaskOperationVariants, operationResponseSchema, connectionTestAcceptedResponseSchema;
+var jsonValueSchema2, jsonSchemaDocumentSchema, nullableRevisionSchema3, nullableUuidSchema2, httpsUrlSchema, agentMarketIpfsUriSchema, nullableIpfsUriSchema, avatarMediaTypeSchema, artifactCountPolicySchema, artifactBatchContractSchema, integrationOptionsResponseSchema, createAgentWithInitialVersionRequestSchema, agentResponseSchema, agentListItemSchema, agentListResponseSchema, agentOnAuditOfferSchema, agentOnAuditReportResponseSchema, versionResponseSchema, replaceVersionAvailabilityRequestSchema, refundCampaignSummarySchema, versionAvailabilityResponseSchema, createAdditionalVersionRequestSchema, beginVersionDraftRequestSchema, beginVersionDraftResponseSchema, abandonVersionDraftRequestSchema, catalogChildRevisionStatusValues, ABANDON_VERSION_DRAFT_CHILD_STATUS_CONTRACT, abandonVersionDraftResponseSchema, agentOnRuntimeRequestSchema, directRuntimeRequestSchema, replaceRuntimeRequestSchema, runtimeResponseSchema, replaceAgentOnRailRequestSchema, agentOnRailResponseSchema, agentOnOfferModeValues, offerConfigurationProperties, createOfferRequestSchema, replaceOfferRequestSchema, offerResponseSchema, offerListResponseSchema, replaceDirectContractRequestSchema, directContractResponseSchema, createCredentialSetupRequestSchema, CREDENTIAL_SETUP_TTL_CONTRACT, credentialSetupBase, agentOnMaterialDownloadActionSchema, directMaterialFulfillmentActionSchema, requiresLocalActionSchema, credentialSetupResponseSchema, AGENTON_PLATFORM_ISSUED_CREDENTIAL_CONTRACT, agentOnConnectionTargetSchema, directConnectionTargetSchema, createConnectionTestRequestSchema, createPublishIntentRequestSchema, createOfferRetirementIntentRequestSchema, publicationIntentResponseSchema, OPERATION_STATUS_CONTRACT, timestampSchema3, nullSchema4, signedBase, publicationOperationResultSchema, localPurchaseOperationResultSchema, localPurchaseChildrenSchema, publicationOperationVariants, localPurchaseOperationVariants, signedOperationResponseSchema, connectionBase, connectionTestResultSchema, connectionOperationVariants, connectionTestOperationResponseSchema, buyerOperationFailureSchema, p1OperationBase, p1OperationVariants, agentOnTaskOperationBase, agentOnTaskOperationVariants, operationResponseSchema, connectionTestAcceptedResponseSchema;
 var init_merchant = __esm({
   "../../packages/agent-market-contracts/src/v1/merchant.ts"() {
     "use strict";
@@ -15257,16 +15592,7 @@ var init_merchant = __esm({
     init_validation_input();
     init_display();
     init_actions();
-    jsonValueSchema2 = Object.freeze({
-      anyOf: Object.freeze([
-        Object.freeze({ type: "object", additionalProperties: true }),
-        Object.freeze({ type: "array", items: true }),
-        Object.freeze({ type: "string" }),
-        Object.freeze({ type: "number" }),
-        Object.freeze({ type: "boolean" }),
-        Object.freeze({ type: "null" })
-      ])
-    });
+    jsonValueSchema2 = jsonValueTypesSchema;
     jsonSchemaDocumentSchema = { type: ["object", "boolean"] };
     nullableRevisionSchema3 = { anyOf: [positiveRevisionSchema, { type: "null" }] };
     nullableUuidSchema2 = { anyOf: [canonicalUuidSchema, { type: "null" }] };
@@ -15623,7 +15949,7 @@ var init_merchant = __esm({
       agenton_task: Object.freeze(["submitted", "working", "input_required", "completed", "failed", "canceled", "expired"])
     });
     timestampSchema3 = { type: "string", format: "date-time" };
-    nullSchema3 = { type: "null" };
+    nullSchema4 = { type: "null" };
     signedBase = (kind, status) => ({
       operationId: canonicalUuidSchema,
       kind: { const: kind },
@@ -15633,7 +15959,7 @@ var init_merchant = __esm({
     });
     publicationOperationResultSchema = strictObjectSchema({
       serviceVersionId: canonicalUuidSchema,
-      publicationGeneration: { anyOf: [nonNegativeGenerationSchema, nullSchema3] },
+      publicationGeneration: { anyOf: [nonNegativeGenerationSchema, nullSchema4] },
       activeVersionRevision: positiveRevisionSchema
     });
     localPurchaseOperationResultSchema = strictObjectSchema({
@@ -15674,13 +16000,13 @@ var init_merchant = __esm({
       passed: { const: true }
     });
     connectionOperationVariants = [
-      strictObjectSchema({ ...connectionBase("authorized"), preparingAt: nullSchema3, executingAt: nullSchema3, completedAt: nullSchema3, failureCode: nullSchema3, result: nullSchema3 }),
-      strictObjectSchema({ ...connectionBase("executing"), preparingAt: timestampSchema3, executingAt: timestampSchema3, completedAt: nullSchema3, failureCode: nullSchema3, result: nullSchema3 }),
-      strictObjectSchema({ ...connectionBase("succeeded"), preparingAt: timestampSchema3, executingAt: timestampSchema3, completedAt: timestampSchema3, failureCode: nullSchema3, result: connectionTestResultSchema }),
-      strictObjectSchema({ ...connectionBase("failed"), preparingAt: nullSchema3, executingAt: nullSchema3, completedAt: timestampSchema3, failureCode: { const: "CONNECTION_TEST_FAILED" }, result: nullSchema3 }),
-      strictObjectSchema({ ...connectionBase("failed"), preparingAt: timestampSchema3, executingAt: nullSchema3, completedAt: timestampSchema3, failureCode: { const: "CONNECTION_TEST_FAILED" }, result: nullSchema3 }),
-      strictObjectSchema({ ...connectionBase("failed"), preparingAt: timestampSchema3, executingAt: timestampSchema3, completedAt: timestampSchema3, failureCode: { const: "CONNECTION_TEST_FAILED" }, result: nullSchema3 }),
-      strictObjectSchema({ ...connectionBase("uncertain"), preparingAt: timestampSchema3, executingAt: timestampSchema3, completedAt: timestampSchema3, failureCode: { const: "CONNECTION_TEST_UNCERTAIN" }, result: nullSchema3 })
+      strictObjectSchema({ ...connectionBase("authorized"), preparingAt: nullSchema4, executingAt: nullSchema4, completedAt: nullSchema4, failureCode: nullSchema4, result: nullSchema4 }),
+      strictObjectSchema({ ...connectionBase("executing"), preparingAt: timestampSchema3, executingAt: timestampSchema3, completedAt: nullSchema4, failureCode: nullSchema4, result: nullSchema4 }),
+      strictObjectSchema({ ...connectionBase("succeeded"), preparingAt: timestampSchema3, executingAt: timestampSchema3, completedAt: timestampSchema3, failureCode: nullSchema4, result: connectionTestResultSchema }),
+      strictObjectSchema({ ...connectionBase("failed"), preparingAt: nullSchema4, executingAt: nullSchema4, completedAt: timestampSchema3, failureCode: { const: "CONNECTION_TEST_FAILED" }, result: nullSchema4 }),
+      strictObjectSchema({ ...connectionBase("failed"), preparingAt: timestampSchema3, executingAt: nullSchema4, completedAt: timestampSchema3, failureCode: { const: "CONNECTION_TEST_FAILED" }, result: nullSchema4 }),
+      strictObjectSchema({ ...connectionBase("failed"), preparingAt: timestampSchema3, executingAt: timestampSchema3, completedAt: timestampSchema3, failureCode: { const: "CONNECTION_TEST_FAILED" }, result: nullSchema4 }),
+      strictObjectSchema({ ...connectionBase("uncertain"), preparingAt: timestampSchema3, executingAt: timestampSchema3, completedAt: timestampSchema3, failureCode: { const: "CONNECTION_TEST_UNCERTAIN" }, result: nullSchema4 })
     ];
     connectionTestOperationResponseSchema = Object.freeze({
       oneOf: connectionOperationVariants,
@@ -15705,13 +16031,13 @@ var init_merchant = __esm({
     p1OperationVariants = [
       ...["awaiting_dispatch", "dispatching", "input_required"].map((status) => strictObjectSchema({
         ...p1OperationBase(status),
-        completedAt: nullSchema3,
-        failureCode: nullSchema3
+        completedAt: nullSchema4,
+        failureCode: nullSchema4
       })),
       strictObjectSchema({
         ...p1OperationBase("completed"),
         completedAt: timestampSchema3,
-        failureCode: nullSchema3
+        failureCode: nullSchema4
       }),
       strictObjectSchema({
         ...p1OperationBase("failed"),
@@ -15731,13 +16057,13 @@ var init_merchant = __esm({
     agentOnTaskOperationVariants = [
       ...["submitted", "working", "input_required"].map((status) => strictObjectSchema({
         ...agentOnTaskOperationBase(status),
-        completedAt: nullSchema3,
-        failureCode: nullSchema3
+        completedAt: nullSchema4,
+        failureCode: nullSchema4
       })),
       strictObjectSchema({
         ...agentOnTaskOperationBase("completed"),
         completedAt: timestampSchema3,
-        failureCode: nullSchema3
+        failureCode: nullSchema4
       }),
       strictObjectSchema({
         ...agentOnTaskOperationBase("failed"),
@@ -15747,7 +16073,7 @@ var init_merchant = __esm({
       strictObjectSchema({
         ...agentOnTaskOperationBase("canceled"),
         completedAt: timestampSchema3,
-        failureCode: nullSchema3
+        failureCode: nullSchema4
       }),
       strictObjectSchema({
         ...agentOnTaskOperationBase("expired"),
@@ -15771,7 +16097,7 @@ var init_merchant = __esm({
       status: { const: "authorized" },
       attempt: positiveRevisionSchema,
       generation: positiveRevisionSchema,
-      preparingAt: nullSchema3
+      preparingAt: nullSchema4
     });
   }
 });
@@ -16105,7 +16431,7 @@ function pageSchema(schema5) {
     services: { ...properties.services, items: publicCatalogWireServiceSchema }
   } };
 }
-var descriptions, described, catalogChainIdSchema, summaryProperties, publicCatalogWireServiceSchema, publicCatalogWireListResponseSchema, publicCatalogWireSearchResponseSchema, publicCatalogWireDetailResponseSchema;
+var descriptions, described3, catalogChainIdSchema, summaryProperties, publicCatalogWireServiceSchema, publicCatalogWireListResponseSchema, publicCatalogWireSearchResponseSchema, publicCatalogWireDetailResponseSchema;
 var init_public_catalog_wire = __esm({
   "../../packages/agent-market-contracts/src/v1/public-catalog-wire.ts"() {
     "use strict";
@@ -16134,13 +16460,13 @@ var init_public_catalog_wire = __esm({
       bytes: "Size of the report file in bytes, up to 20 MiB.",
       uploadedAt: "Upload timestamp recorded for the audit report."
     };
-    described = describeSummary(publicBuyerServiceSchema).properties;
+    described3 = describeSummary(publicBuyerServiceSchema).properties;
     catalogChainIdSchema = Object.freeze({
       type: "integer",
       minimum: 1,
       description: "EVM chain ID for this service's payments. Currently 8453 (Base mainnet) in production and 84532 (Base Sepolia) in test."
     });
-    summaryProperties = Object.fromEntries(Object.entries(described).filter(([name]) => name !== "versionRevision" && name !== "runtimeConfigHash"));
+    summaryProperties = Object.fromEntries(Object.entries(described3).filter(([name]) => name !== "versionRevision" && name !== "runtimeConfigHash"));
     publicCatalogWireServiceSchema = {
       ...strictObjectSchema({ ...summaryProperties, chainId: catalogChainIdSchema }),
       description: "Public catalog summary for one agent service."
@@ -16154,7 +16480,7 @@ var init_public_catalog_wire = __esm({
         properties: {
           ...variant.properties,
           chainId: catalogChainIdSchema,
-          paymentToken: described.paymentToken
+          paymentToken: described3.paymentToken
         },
         required: [...variant.required, "chainId"]
       }))
@@ -16223,6 +16549,7 @@ var init_operations = __esm({
     "use strict";
     init_localization();
     init_artifacts();
+    init_transfers();
     init_agent_cli();
     init_buyer();
     init_testnet_purchase_v1();
@@ -16705,6 +17032,18 @@ var init_operations = __esm({
         integrationFamilies: families.active,
         writes: false
       }),
+      "buyer_call_eligibility.get": operation({
+        id: "buyer_call_eligibility.get",
+        requiredScope: "agent_market:buyer:read",
+        http: http("get", "/api/v1/agent-market/buyer/call-eligibility", 200, {
+          querySchema: callEligibilityQuerySchema,
+          responseSchema: callEligibilityResponseSchema
+        }),
+        mcp: { name: "agent_market_buyer_call_eligibility_get" },
+        cli: null,
+        integrationFamilies: families.active,
+        writes: false
+      }),
       "buyer_p1_invocations.create": operation({
         id: "buyer_p1_invocations.create",
         requiredScope: "agent_market:buyer:invoke",
@@ -16797,21 +17136,17 @@ var init_operations = __esm({
         integrationFamilies: families.agenton,
         writes: true
       }),
-      "buyer_tasks.cancel": operation({
-        id: "buyer_tasks.cancel",
-        requiredScope: "agent_market:buyer:invoke",
-        http: http("post", "/api/v1/agent-market/buyer/tasks/{taskId}/cancel", 202, {
-          requestSchema: cancelTaskRequestSchema,
-          responseSchema: taskCancelAcceptedSchema,
-          idempotencyRequired: true,
-          ifMatchRequired: true,
-          ifMatchResourceKind: "task",
-          etagReturned: true
+      "buyer_runs.list": operation({
+        id: "buyer_runs.list",
+        requiredScope: "agent_market:buyer:read",
+        http: http("get", "/api/v1/agent-market/buyer/runs", 200, {
+          querySchema: buyerRunsQuerySchema,
+          responseSchema: buyerRunsResponseSchema
         }),
-        mcp: { name: "agent_market_buyer_task_cancel" },
+        mcp: { name: "agent_market_buyer_runs_list" },
         cli: null,
-        integrationFamilies: families.agenton,
-        writes: true
+        integrationFamilies: families.active,
+        writes: false
       }),
       "buyer_direct_invocations.create": operation({
         id: "buyer_direct_invocations.create",
@@ -16826,31 +17161,17 @@ var init_operations = __esm({
         integrationFamilies: families.direct,
         writes: true
       }),
-      "buyer_artifacts.upload": operation({
-        id: "buyer_artifacts.upload",
+      "buyer_input_artifacts.prepare": operation({
+        id: "buyer_input_artifacts.prepare",
         requiredScope: "agent_market:buyer:invoke",
-        http: http("put", "/api/v1/agent-market/buyer/artifacts/{artifactId}/bytes", 204, {
-          requestContentType: HTTP_ARTIFACT_BYTES_CONTRACT.contentType,
-          requestHeaders: {
-            "Content-Length": positiveIntegerStringSchema,
-            "X-Finch-Content-SHA256": hex32Schema
-          },
+        http: http("post", "/api/v1/agent-market/buyer/offers/{offerId}/input-artifacts", 201, {
+          requestSchema: prepareInputArtifactRequestSchema,
+          responseSchema: prepareInputArtifactResponseSchema,
           idempotencyRequired: true
         }),
-        mcp: {
-          name: "agent_market_buyer_artifact_upload_base64",
-          sensitiveContentFields: [MCP_ARTIFACT_BASE64_CONTRACT.field],
-          sensitive_content: true,
-          echoSensitiveContent: false,
-          logSensitiveContent: false,
-          compositeInputProperties: {
-            expectedByteLength: positiveIntegerStringSchema,
-            contentSha256: hex32Schema
-          },
-          compositeInputRequired: ["expectedByteLength", "contentSha256"]
-        },
+        mcp: { name: "agent_market_buyer_input_artifact_prepare" },
         cli: null,
-        integrationFamilies: families.active,
+        integrationFamilies: families.agenton,
         writes: true
       }),
       "buyer_artifacts.download": operation({
@@ -16870,36 +17191,24 @@ var init_operations = __esm({
         integrationFamilies: families.active,
         writes: false
       }),
-      "artifacts.upload": operation({
-        id: "artifacts.upload",
-        requiredScope: "agent_market:merchant:write",
-        http: http("put", "/api/v1/agent-market/artifacts/{artifactId}/bytes", 204, {
-          requestContentType: HTTP_ARTIFACT_BYTES_CONTRACT.contentType,
-          idempotencyRequired: true
+      "buyer_artifact_download_links.create": operation({
+        id: "buyer_artifact_download_links.create",
+        requiredScope: "agent_market:buyer:read",
+        http: http("post", "/api/v1/agent-market/buyer/artifacts/{artifactId}/download-links", 201, {
+          responseSchema: artifactDownloadLinkResponseSchema
         }),
-        mcp: {
-          name: "agent_market_artifact_upload_base64",
-          sensitiveContentFields: [MCP_ARTIFACT_BASE64_CONTRACT.field],
-          sensitive_content: true,
-          echoSensitiveContent: false,
-          logSensitiveContent: false
-        },
+        mcp: { name: "agent_market_buyer_artifact_download_link_create" },
         cli: null,
-        writes: true
+        integrationFamilies: families.active,
+        writes: false
       }),
-      "artifacts.download": operation({
-        id: "artifacts.download",
-        requiredScope: "agent_market:merchant:read",
-        http: http("get", "/api/v1/agent-market/artifacts/{artifactId}/bytes", 200, {
-          responseContentType: HTTP_ARTIFACT_BYTES_CONTRACT.contentType
+      "merchant_avatar_uploads.prepare": operation({
+        id: "merchant_avatar_uploads.prepare",
+        requiredScope: "agent_market:merchant:write",
+        http: http("post", "/api/v1/agent-market/merchant/avatar-uploads", 201, {
+          responseSchema: prepareAvatarUploadResponseSchema
         }),
-        mcp: {
-          name: "agent_market_artifact_download_base64",
-          sensitiveContentFields: [MCP_ARTIFACT_BASE64_CONTRACT.field],
-          sensitive_content: true,
-          echoSensitiveContent: false,
-          logSensitiveContent: false
-        },
+        mcp: { name: "agent_market_merchant_avatar_upload_prepare" },
         cli: null,
         writes: false
       }),
@@ -16989,25 +17298,19 @@ var init_operations = __esm({
       "merchant_credential_setups.create": "merchant_credential_setups.create",
       "merchant_connection_tests.create": "connection_test",
       "merchant_publish_intents.create": "publish",
-      "artifacts.upload": "artifacts.upload",
       "buyer_purchase_intents.create": "local_purchase",
       "buyer_p1_invocations.create": "buyer_p1_invocations.create",
       "buyer_p1_invocations.continue": "buyer_p1_invocations.continue",
       "buyer_tasks.create": "buyer_tasks.create",
       "buyer_tasks.input": "buyer_tasks.input",
-      "buyer_tasks.cancel": "buyer_tasks.cancel",
       "buyer_direct_invocations.create": "buyer_direct_invocations.create",
-      "buyer_artifacts.upload": "buyer_artifacts.upload",
+      "buyer_input_artifacts.prepare": "buyer_input_artifacts.prepare",
       "signing_intents.approve": "signing_approve",
       "signing_intents.deny": "signing_deny",
       "credential_setups.claim": "credential_claim",
       "credential_setups.fulfill": "credential_fulfill"
     });
     fingerprintSemanticOverrides = Object.freeze({
-      "artifacts.upload": Object.freeze({
-        properties: Object.freeze({ byteLength: positiveIntegerStringSchema, contentSha256: hex32Schema }),
-        required: Object.freeze(["byteLength", "contentSha256"])
-      }),
       "credential_setups.claim": Object.freeze({ properties: Object.freeze({}), required: Object.freeze([]) }),
       "credential_setups.fulfill": Object.freeze({
         variants: Object.freeze([
@@ -17574,6 +17877,7 @@ var init_v1 = __esm({
     init_public_catalog_wire();
     init_snapshot();
     init_testnet_purchase_v1();
+    init_transfers();
     init_validation_input();
     init_localization();
   }
@@ -32943,80 +33247,92 @@ var init_agent_service = __esm({
       deployments: {
         test: {
           enabled: true,
-          network: {
-            chainId: 84532,
-            name: "Base Sepolia",
-            explorerUrl: "https://sepolia.basescan.org",
-            defaultRpcUrls: [
-              "https://sepolia.base.org",
-              "https://base-sepolia-rpc.publicnode.com"
-            ]
-          },
-          sourceRepository: "FinchipAI/Finch-Agent-Service-Protocol",
-          sourceCommit: "c3066da940945f9bf48d4770a7f89a1e42676771",
-          contracts: {
-            protocol: "0xad9041b2299ffcf01f98cbdb8c053bfad7396d90",
-            vault: "0xd57b21072200c15273617bd13f1e53c9cfacb5fb",
-            vaultImplementation: "0x61669707dcdcd976df19d095bda4a05728e240e0",
-            vaultProxyAdmin: "0xd9d11f658af6f0a056b77b8268f7b2dc840d0b8a",
-            paymentToken: "0x036cbd53842c5426634e7929541ec2318f3dcf7e"
-          },
-          authority: {
-            admin: "0xe2c7b4967df7a83c13e5f504c4f58dbc5a8fd60c",
-            treasury: "0xe2c7b4967df7a83c13e5f504c4f58dbc5a8fd60c",
-            settlementAttestor: "0xe77ec989158829fe2182868d442a8170c9e4e337",
-            refundAttestor: "0xe77ec989158829fe2182868d442a8170c9e4e337",
-            freezeKeeper: "0xe2c7b4967df7a83c13e5f504c4f58dbc5a8fd60c"
-          },
-          deployment: {
-            firstBlock: "45675409",
-            completedBlock: "45675424",
-            confirmations: 2,
-            deploymentHash: "0x974663ec798a69cc5f98f119dcbdd091235424d7ac519cdb878fa0ed8d556c6d"
-          },
-          policy: {
-            paymentTokenSymbol: "USDC",
-            paymentTokenDecimals: 6
+          defaultChainId: 84532,
+          chains: {
+            "84532": {
+              enabled: true,
+              network: {
+                chainId: 84532,
+                name: "Base Sepolia",
+                explorerUrl: "https://sepolia.basescan.org",
+                defaultRpcUrls: [
+                  "https://sepolia.base.org",
+                  "https://base-sepolia-rpc.publicnode.com"
+                ]
+              },
+              sourceRepository: "FinchipAI/Finch-Agent-Service-Protocol",
+              sourceCommit: "c3066da940945f9bf48d4770a7f89a1e42676771",
+              contracts: {
+                protocol: "0xad9041b2299ffcf01f98cbdb8c053bfad7396d90",
+                vault: "0xd57b21072200c15273617bd13f1e53c9cfacb5fb",
+                vaultImplementation: "0x61669707dcdcd976df19d095bda4a05728e240e0",
+                vaultProxyAdmin: "0xd9d11f658af6f0a056b77b8268f7b2dc840d0b8a",
+                paymentToken: "0x036cbd53842c5426634e7929541ec2318f3dcf7e"
+              },
+              authority: {
+                admin: "0xe2c7b4967df7a83c13e5f504c4f58dbc5a8fd60c",
+                treasury: "0xe2c7b4967df7a83c13e5f504c4f58dbc5a8fd60c",
+                settlementAttestor: "0xe77ec989158829fe2182868d442a8170c9e4e337",
+                refundAttestor: "0xe77ec989158829fe2182868d442a8170c9e4e337",
+                freezeKeeper: "0xe2c7b4967df7a83c13e5f504c4f58dbc5a8fd60c"
+              },
+              deployment: {
+                firstBlock: "45675409",
+                completedBlock: "45675424",
+                confirmations: 2,
+                deploymentHash: "0x974663ec798a69cc5f98f119dcbdd091235424d7ac519cdb878fa0ed8d556c6d"
+              },
+              policy: {
+                paymentTokenSymbol: "USDC",
+                paymentTokenDecimals: 6
+              }
+            }
           }
         },
         production: {
           enabled: true,
-          network: {
-            chainId: 8453,
-            name: "Base",
-            explorerUrl: "https://basescan.org",
-            defaultRpcUrls: [
-              "https://mainnet.base.org",
-              "https://base.drpc.org"
-            ]
-          },
-          sourceRepository: "FinchipAI/Finch-Agent-Service-Protocol",
-          sourceCommit: "baf5341d0f14ac43960c13915535d6e466a6c156",
-          contracts: {
-            protocol: "0xe6eca38efc29613cde82d38484620092eaab079d",
-            protocolImplementation: "0x092d79bb2941d53b378b329f8785452c134a84c1",
-            protocolProxyAdmin: "0xc4a54503f3782ebd1e319a104e56e2b4744aa4c0",
-            vault: "0xd2e55cfac96a620f374e581cf43ed522adef4604",
-            vaultImplementation: "0x6e36a58f464d419039808b4fd297419224feafa0",
-            vaultProxyAdmin: "0xd81dbdd22d7ce06a80a310462094c0eede4554fd",
-            paymentToken: "0x833589fcd6edb6e08f4c7c32d4f71b54bda02913"
-          },
-          authority: {
-            admin: "0x4fcb985a020dc1dd8a5dfc4adf4606eac4f68075",
-            treasury: "0xc664d467ad91aead3711a140b57fb0e70faeb978",
-            settlementAttestor: "0x1dc1ccc1ebdcdd6c57a8c22776883b45c6824cf6",
-            refundAttestor: "0x1dc1ccc1ebdcdd6c57a8c22776883b45c6824cf6",
-            freezeKeeper: "0x1dc1ccc1ebdcdd6c57a8c22776883b45c6824cf6"
-          },
-          deployment: {
-            firstBlock: "50636410",
-            completedBlock: "50636427",
-            confirmations: 2,
-            deploymentHash: "0x65b6fa11fdf0ad8f20f4f4fedac8986d4b19657e0816fac7238ae94ff0ccd518"
-          },
-          policy: {
-            paymentTokenSymbol: "USDC",
-            paymentTokenDecimals: 6
+          defaultChainId: 8453,
+          chains: {
+            "8453": {
+              enabled: true,
+              network: {
+                chainId: 8453,
+                name: "Base",
+                explorerUrl: "https://basescan.org",
+                defaultRpcUrls: [
+                  "https://mainnet.base.org",
+                  "https://base.drpc.org"
+                ]
+              },
+              sourceRepository: "FinchipAI/Finch-Agent-Service-Protocol",
+              sourceCommit: "baf5341d0f14ac43960c13915535d6e466a6c156",
+              contracts: {
+                protocol: "0xe6eca38efc29613cde82d38484620092eaab079d",
+                protocolImplementation: "0x092d79bb2941d53b378b329f8785452c134a84c1",
+                protocolProxyAdmin: "0xc4a54503f3782ebd1e319a104e56e2b4744aa4c0",
+                vault: "0xd2e55cfac96a620f374e581cf43ed522adef4604",
+                vaultImplementation: "0x6e36a58f464d419039808b4fd297419224feafa0",
+                vaultProxyAdmin: "0xd81dbdd22d7ce06a80a310462094c0eede4554fd",
+                paymentToken: "0x833589fcd6edb6e08f4c7c32d4f71b54bda02913"
+              },
+              authority: {
+                admin: "0x4fcb985a020dc1dd8a5dfc4adf4606eac4f68075",
+                treasury: "0xc664d467ad91aead3711a140b57fb0e70faeb978",
+                settlementAttestor: "0x1dc1ccc1ebdcdd6c57a8c22776883b45c6824cf6",
+                refundAttestor: "0x1dc1ccc1ebdcdd6c57a8c22776883b45c6824cf6",
+                freezeKeeper: "0x1dc1ccc1ebdcdd6c57a8c22776883b45c6824cf6"
+              },
+              deployment: {
+                firstBlock: "50636410",
+                completedBlock: "50636427",
+                confirmations: 2,
+                deploymentHash: "0x65b6fa11fdf0ad8f20f4f4fedac8986d4b19657e0816fac7238ae94ff0ccd518"
+              },
+              policy: {
+                paymentTokenSymbol: "USDC",
+                paymentTokenDecimals: 6
+              }
+            }
           }
         }
       }
@@ -33097,7 +33413,8 @@ var init_skill_protocol = __esm({
                 defaultRpcUrls: [
                   "https://sepolia.base.org",
                   "https://base-sepolia-rpc.publicnode.com"
-                ]
+                ],
+                maxLogBlockRange: 1e3
               },
               sourceRepository: "FinchipAI/finchip-protocol",
               sourceCommit: "2944849eabf1f1a8f5ccfd03c2f92502487002db",
@@ -33270,6 +33587,34 @@ var init_skill_protocol = __esm({
                 factoryFirstBlock: "498556878",
                 confirmations: 2
               }
+            },
+            "43114": {
+              enabled: true,
+              network: {
+                chainId: 43114,
+                name: "Avalanche C-Chain",
+                explorerUrl: "https://snowtrace.io",
+                defaultRpcUrls: [
+                  "https://api.avax.network/ext/bc/C/rpc",
+                  "https://avalanche-c-chain-rpc.publicnode.com"
+                ]
+              },
+              sourceRepository: "FinchipAI/finchip-protocol",
+              sourceCommit: "61982867d271ea9ebf0730b1a650bee1b9894642",
+              abiSourceCommit: "61982867d271ea9ebf0730b1a650bee1b9894642",
+              contracts: {
+                skillToken: "0xcb19ea4fa56c3fc0c03892ec4b76e546572ba2b8",
+                revenueRight: "0x0f9b050b69cd0361ab3baed1adff4a7faa709fbc",
+                skillInstance: "0x1a111ef24408805b76913e03d6765a9be3313c6e",
+                skillFactory: "0x6f75930c9631c77d88e979ad98a209fb896e9764",
+                skillMarket: "0x200e39cb510a36a5b6d26efba61993af0aab70cf",
+                feeRouter: "0xe520cd670add2f8813e3c76bd69a033c5cfa5b92"
+              },
+              deployment: {
+                firstBlock: "96438446",
+                factoryFirstBlock: "96438471",
+                confirmations: 2
+              }
             }
           }
         }
@@ -33288,81 +33633,93 @@ var init_task_protocol = __esm({
       deployments: {
         test: {
           enabled: true,
-          network: {
-            chainId: 84532,
-            name: "Base Sepolia",
-            explorerUrl: "https://sepolia.basescan.org",
-            defaultRpcUrls: [
-              "https://sepolia.base.org",
-              "https://base-sepolia-rpc.publicnode.com"
-            ]
-          },
-          sourceRepository: "FinchipAI/Finch-Task-Protocol",
-          sourceCommit: "ae220fa6866c95330472ea7aa50a1d46260231c8",
-          abiSourceCommit: "c4491b8fe85a09840c5873bc6ac142c580febd32",
-          vaultSourceCommit: "c4491b8fe85a09840c5873bc6ac142c580febd32",
-          contracts: {
-            protocol: "0x233f2cb1d7b46c4e2422336b4430b556b53b8749",
-            vault: "0x0a4fa1147b46cef51e5c8775ecbb6324e229a94d",
-            vaultImplementation: "0x344e84544e52601a83260ba48b0215ad0c28c1cf",
-            vaultProxyAdmin: "0xdddaa163dc4789150db52e7c89f3001f11ff2c12",
-            paymentToken: "0x036cbd53842c5426634e7929541ec2318f3dcf7e"
-          },
-          authority: {
-            admin: "0xc93c26eeac4aeb8d6c756e5d55a67baa9f83992c",
-            treasury: "0xc93c26eeac4aeb8d6c756e5d55a67baa9f83992c",
-            awardAttestor: "0xc3322f290d00270fde207600eb064fc7852ac122",
-            creditGranter: "0x6f49129455e6edafe1e4c37045bc1bbe6906ea3b",
-            freezeKeeper: "0xfb6739091592b38cbca76dfab5dab739b39accb8"
-          },
-          deployment: {
-            firstBlock: "45763543",
-            completedBlock: "45763543",
-            confirmations: 1
-          },
-          policy: {
-            paymentTokenSymbol: "USDC",
-            paymentTokenDecimals: 6
+          defaultChainId: 84532,
+          chains: {
+            "84532": {
+              enabled: true,
+              network: {
+                chainId: 84532,
+                name: "Base Sepolia",
+                explorerUrl: "https://sepolia.basescan.org",
+                defaultRpcUrls: [
+                  "https://sepolia.base.org",
+                  "https://base-sepolia-rpc.publicnode.com"
+                ]
+              },
+              sourceRepository: "FinchipAI/Finch-Task-Protocol",
+              sourceCommit: "ae220fa6866c95330472ea7aa50a1d46260231c8",
+              abiSourceCommit: "c4491b8fe85a09840c5873bc6ac142c580febd32",
+              vaultSourceCommit: "c4491b8fe85a09840c5873bc6ac142c580febd32",
+              contracts: {
+                protocol: "0x233f2cb1d7b46c4e2422336b4430b556b53b8749",
+                vault: "0x0a4fa1147b46cef51e5c8775ecbb6324e229a94d",
+                vaultImplementation: "0x344e84544e52601a83260ba48b0215ad0c28c1cf",
+                vaultProxyAdmin: "0xdddaa163dc4789150db52e7c89f3001f11ff2c12",
+                paymentToken: "0x036cbd53842c5426634e7929541ec2318f3dcf7e"
+              },
+              authority: {
+                admin: "0xc93c26eeac4aeb8d6c756e5d55a67baa9f83992c",
+                treasury: "0xc93c26eeac4aeb8d6c756e5d55a67baa9f83992c",
+                awardAttestor: "0xc3322f290d00270fde207600eb064fc7852ac122",
+                creditGranter: "0x6f49129455e6edafe1e4c37045bc1bbe6906ea3b",
+                freezeKeeper: "0xfb6739091592b38cbca76dfab5dab739b39accb8"
+              },
+              deployment: {
+                firstBlock: "45763543",
+                completedBlock: "45763543",
+                confirmations: 1
+              },
+              policy: {
+                paymentTokenSymbol: "USDC",
+                paymentTokenDecimals: 6
+              }
+            }
           }
         },
         production: {
           enabled: true,
-          network: {
-            chainId: 8453,
-            name: "Base",
-            explorerUrl: "https://basescan.org",
-            defaultRpcUrls: [
-              "https://mainnet.base.org",
-              "https://base.drpc.org"
-            ]
-          },
-          sourceRepository: "FinchipAI/Finch-Task-Protocol",
-          sourceCommit: "456624f9a46af94d39a77dc60955f51695607fbb",
-          abiSourceCommit: "c4491b8fe85a09840c5873bc6ac142c580febd32",
-          contracts: {
-            protocol: "0x5e80c59c8d369b3b36f2e809fcc99e1ee67d4eb0",
-            protocolImplementation: "0x75e2485205a222a6a43470093a99a0330b41104c",
-            protocolProxyAdmin: "0x081e42d65da9c7a82bd31de942b01a5b9584b743",
-            vault: "0xddbf3b1d7df7e2ba1655b4895d228a1bed8a1f99",
-            vaultImplementation: "0xd0d882588228db944b599eb7eabf841343644ae5",
-            vaultProxyAdmin: "0x6e90e5a4ed8a1e4db13fac9606c5867c4e48a896",
-            paymentToken: "0x833589fcd6edb6e08f4c7c32d4f71b54bda02913"
-          },
-          authority: {
-            admin: "0x4fcb985a020dc1dd8a5dfc4adf4606eac4f68075",
-            treasury: "0xc664d467ad91aead3711a140b57fb0e70faeb978",
-            awardAttestor: "0x1dc1ccc1ebdcdd6c57a8c22776883b45c6824cf6",
-            creditGranter: "0x1cf667f5d7075cab21fcc0497c469e7fe492b394",
-            freezeKeeper: "0x1dc1ccc1ebdcdd6c57a8c22776883b45c6824cf6"
-          },
-          deployment: {
-            firstBlock: "50517972",
-            completedBlock: "50518702",
-            confirmations: 2
-          },
-          policy: {
-            paymentTokenSymbol: "USDC",
-            paymentTokenDecimals: 6
+          defaultChainId: 8453,
+          chains: {
+            "8453": {
+              enabled: true,
+              network: {
+                chainId: 8453,
+                name: "Base",
+                explorerUrl: "https://basescan.org",
+                defaultRpcUrls: [
+                  "https://mainnet.base.org",
+                  "https://base.drpc.org"
+                ]
+              },
+              sourceRepository: "FinchipAI/Finch-Task-Protocol",
+              sourceCommit: "456624f9a46af94d39a77dc60955f51695607fbb",
+              abiSourceCommit: "c4491b8fe85a09840c5873bc6ac142c580febd32",
+              contracts: {
+                protocol: "0x5e80c59c8d369b3b36f2e809fcc99e1ee67d4eb0",
+                protocolImplementation: "0x75e2485205a222a6a43470093a99a0330b41104c",
+                protocolProxyAdmin: "0x081e42d65da9c7a82bd31de942b01a5b9584b743",
+                vault: "0xddbf3b1d7df7e2ba1655b4895d228a1bed8a1f99",
+                vaultImplementation: "0xd0d882588228db944b599eb7eabf841343644ae5",
+                vaultProxyAdmin: "0x6e90e5a4ed8a1e4db13fac9606c5867c4e48a896",
+                paymentToken: "0x833589fcd6edb6e08f4c7c32d4f71b54bda02913"
+              },
+              authority: {
+                admin: "0x4fcb985a020dc1dd8a5dfc4adf4606eac4f68075",
+                treasury: "0xc664d467ad91aead3711a140b57fb0e70faeb978",
+                awardAttestor: "0x1dc1ccc1ebdcdd6c57a8c22776883b45c6824cf6",
+                creditGranter: "0x1cf667f5d7075cab21fcc0497c469e7fe492b394",
+                freezeKeeper: "0x1dc1ccc1ebdcdd6c57a8c22776883b45c6824cf6"
+              },
+              deployment: {
+                firstBlock: "50517972",
+                completedBlock: "50518702",
+                confirmations: 2
+              },
+              policy: {
+                paymentTokenSymbol: "USDC",
+                paymentTokenDecimals: 6
+              }
+            }
           }
         }
       }
@@ -33386,6 +33743,21 @@ function parseTypedRegistry(schema5, value) {
   }
   return parsed2.data;
 }
+function clientDeploymentsByChain(protocol, deployments) {
+  const byChain = {};
+  for (const environment3 of ["test", "production"]) {
+    const deployment = deployments[environment3];
+    if (!deployment.enabled || !deployment.chains) continue;
+    for (const key of Object.keys(deployment.chains)) {
+      const chainId = Number(key);
+      if (byChain[chainId]) {
+        throw new DeploymentManifestError(`${protocol} lists chain ${chainId} in both test and production.`);
+      }
+      byChain[chainId] = environment3;
+    }
+  }
+  return Object.freeze(byChain);
+}
 function activeDeployment(protocol, deployments, environment3) {
   if (environment3 === "local") {
     throw new DeploymentManifestError(
@@ -33398,15 +33770,27 @@ function activeDeployment(protocol, deployments, environment3) {
   }
   return deployment;
 }
+function chainOf(protocol, deployments, environment3, chainId) {
+  const selected = chainId ?? deployments.defaultChainId;
+  const value = deployments.chains[String(selected)];
+  if (!value) {
+    throw new DeploymentManifestError(
+      `${protocol} is not deployed to chain ${selected} in ${environment3}. Deployed: ${Object.keys(deployments.chains).join(", ")}.`
+    );
+  }
+  return value;
+}
+function sortedChainIds(chains) {
+  return Object.freeze(Object.keys(chains).map(Number).sort((left, right) => left - right));
+}
 function isTaskProtocolDeploymentEnabled(environment3) {
   return environment3 !== "local" && taskRegistry.deployments[environment3].enabled;
 }
-function getAgentServiceDeployment(environment3) {
-  const value = activeDeployment(
-    agentRegistry.protocol,
-    agentRegistry.deployments,
-    environment3
-  );
+function agentEnvironment(environment3) {
+  return activeDeployment(agentRegistry.protocol, agentRegistry.deployments, environment3);
+}
+function getAgentServiceDeployment(environment3, chainId) {
+  const value = chainOf(agentRegistry.protocol, agentEnvironment(environment3), environment3, chainId);
   return Object.freeze({
     chainId: value.network.chainId,
     networkName: value.network.name,
@@ -33432,16 +33816,13 @@ function getAgentServiceDeployment(environment3) {
 function getAgentServiceDeploymentByChainId(chainId) {
   const selected = AGENT_CLIENT_DEPLOYMENT_BY_CHAIN[chainId];
   if (!selected) throw new DeploymentManifestError(`agent_service_v0 has no reviewed custody authority for chain ${chainId}.`);
-  const deployment = getAgentServiceDeployment(selected);
-  if (deployment.chainId !== chainId) throw new DeploymentManifestError(`agent_service_v0 custody catalogue is stale for chain ${chainId}.`);
-  return deployment;
+  return getAgentServiceDeployment(selected, chainId);
 }
-function getTaskProtocolDeployment(environment3) {
-  const value = activeDeployment(
-    taskRegistry.protocol,
-    taskRegistry.deployments,
-    environment3
-  );
+function taskEnvironment(environment3) {
+  return activeDeployment(taskRegistry.protocol, taskRegistry.deployments, environment3);
+}
+function getTaskProtocolDeployment(environment3, chainId) {
+  const value = chainOf(taskRegistry.protocol, taskEnvironment(environment3), environment3, chainId);
   return Object.freeze({
     chainId: value.network.chainId,
     protocolAddress: value.contracts.protocol,
@@ -33467,9 +33848,7 @@ function getTaskProtocolDeployment(environment3) {
 function getTaskProtocolDeploymentByChainId(chainId) {
   const selected = TASK_CLIENT_DEPLOYMENT_BY_CHAIN[chainId];
   if (!selected) throw new DeploymentManifestError(`task_protocol_v0 has no reviewed custody authority for chain ${chainId}.`);
-  const deployment = getTaskProtocolDeployment(selected);
-  if (deployment.chainId !== chainId) throw new DeploymentManifestError(`task_protocol_v0 custody catalogue is stale for chain ${chainId}.`);
-  return deployment;
+  return getTaskProtocolDeployment(selected, chainId);
 }
 function skillEnvironment(environment3) {
   return activeDeployment(
@@ -33479,22 +33858,13 @@ function skillEnvironment(environment3) {
   );
 }
 function getSkillProtocolChainIds(environment3) {
-  return Object.freeze(
-    Object.keys(skillEnvironment(environment3).chains).map(Number).sort((a, b) => a - b)
-  );
+  return sortedChainIds(skillEnvironment(environment3).chains);
 }
 function getSkillProtocolDefaultChainId(environment3) {
   return skillEnvironment(environment3).defaultChainId;
 }
 function getSkillProtocolDeployment(environment3, chainId) {
-  const deployments = skillEnvironment(environment3);
-  const selected = chainId ?? deployments.defaultChainId;
-  const value = deployments.chains[String(selected)];
-  if (!value) {
-    throw new DeploymentManifestError(
-      `${skillRegistry.protocol} is not deployed to chain ${selected} in ${environment3}. Deployed: ${Object.keys(deployments.chains).join(", ")}.`
-    );
-  }
+  const value = chainOf(skillRegistry.protocol, skillEnvironment(environment3), environment3, chainId);
   return Object.freeze({
     chainId: value.network.chainId,
     explorerUrl: value.network.explorerUrl,
@@ -33522,7 +33892,35 @@ function getSkillProtocolDeploymentByChainId(chainId) {
 function getAllSkillProtocolChainIds() {
   return Object.freeze(Object.keys(SKILL_CLIENT_DEPLOYMENT_BY_CHAIN).map(Number).sort((left, right) => left - right));
 }
-var canonicalAddressSchema, hashSchema, commitSchema, positiveDecimalSchema, DEFAULT_LOG_BLOCK_RANGE, DEFAULT_CONCURRENT_REQUESTS, networkSchema, publicRpcUrlsSchema, legacySkillIndexerChainSchema, legacySkillIndexerRegistrySchema, sourceSchema, disabledDeploymentSchema, deploymentsShape, agentActiveSchema, taskActiveSchema, skillActiveSchema, agentRegistrySchema, taskRegistrySchema, skillEnvironmentSchema, skillRegistrySchema, registrySchema, agentRegistry, taskRegistry, skillRegistry, legacySkillIndexerRegistry, AGENT_CLIENT_DEPLOYMENT_BY_CHAIN, TASK_CLIENT_DEPLOYMENT_BY_CHAIN, SKILL_CLIENT_DEPLOYMENT_BY_CHAIN;
+function reviewedNetworks(environment3) {
+  const selected = environment3 === "local" ? "test" : environment3;
+  const byChain = /* @__PURE__ */ new Map();
+  const sources = [skillRegistry.deployments[selected], taskRegistry.deployments[selected], agentRegistry.deployments[selected]];
+  for (const deployment of sources) {
+    if (!deployment.enabled) continue;
+    for (const entry2 of Object.values(deployment.chains)) {
+      const { chainId, name, explorerUrl, defaultRpcUrls } = entry2.network;
+      const known = byChain.get(chainId);
+      if (!known) {
+        byChain.set(chainId, { name, explorerUrl, urls: [...defaultRpcUrls] });
+        continue;
+      }
+      if (known.explorerUrl !== explorerUrl) {
+        throw new DeploymentManifestError(
+          `Chain ${chainId} has two explorers in ${selected}: ${known.explorerUrl} and ${explorerUrl}.`
+        );
+      }
+      for (const url2 of defaultRpcUrls) if (!known.urls.includes(url2)) known.urls.push(url2);
+    }
+  }
+  return new Map([...byChain].map(([chainId, value]) => [chainId, Object.freeze({
+    chainId,
+    name: value.name,
+    explorerUrl: value.explorerUrl,
+    defaultRpcUrls: Object.freeze([...value.urls])
+  })]));
+}
+var canonicalAddressSchema, hashSchema, commitSchema, positiveDecimalSchema, DEFAULT_LOG_BLOCK_RANGE, DEFAULT_CONCURRENT_REQUESTS, networkSchema, publicRpcUrlsSchema, legacySkillIndexerChainSchema, legacySkillIndexerRegistrySchema, sourceSchema, disabledDeploymentSchema, deploymentsShape, agentActiveSchema, taskActiveSchema, skillActiveSchema, multiChainEnvironmentSchema, agentEnvironmentSchema, taskEnvironmentSchema, skillEnvironmentSchema, agentRegistrySchema, taskRegistrySchema, skillRegistrySchema, registrySchema, agentRegistry, taskRegistry, skillRegistry, legacySkillIndexerRegistry, AGENT_CLIENT_DEPLOYMENT_BY_CHAIN, TASK_CLIENT_DEPLOYMENT_BY_CHAIN, SKILL_CLIENT_DEPLOYMENT_BY_CHAIN, REVIEWED_NETWORKS;
 var init_chains = __esm({
   "../../packages/deployment-manifest/src/chains/index.ts"() {
     "use strict";
@@ -33730,31 +34128,20 @@ var init_chains = __esm({
         context.addIssue({ code: "custom", message: "firstBlock must not exceed factoryFirstBlock." });
       }
     });
-    agentRegistrySchema = external_exports.strictObject({
-      schemaVersion: external_exports.literal(1),
-      protocol: external_exports.literal("agent_service_v0"),
-      deployments: deploymentsShape(agentActiveSchema)
-    });
-    taskRegistrySchema = external_exports.strictObject({
-      schemaVersion: external_exports.literal(1),
-      protocol: external_exports.literal("task_protocol_v0"),
-      deployments: deploymentsShape(taskActiveSchema)
-    });
-    skillEnvironmentSchema = external_exports.strictObject({
+    multiChainEnvironmentSchema = (label, chain) => external_exports.strictObject({
       enabled: external_exports.literal(true),
-      /** Where publishing lands, and what an unqualified read resolves against. */
       defaultChainId: external_exports.number().int().positive(),
-      chains: external_exports.record(external_exports.string().regex(/^[1-9][0-9]*$/u), skillActiveSchema)
+      chains: external_exports.record(external_exports.string().regex(/^[1-9][0-9]*$/u), chain)
     }).superRefine((value, context) => {
       const ids = Object.keys(value.chains);
       if (ids.length === 0) {
-        context.addIssue({ code: "custom", message: "An enabled Skill environment must list at least one chain." });
+        context.addIssue({ code: "custom", message: `An enabled ${label} environment must list at least one chain.` });
       }
-      for (const [key, chain] of Object.entries(value.chains)) {
-        if (Number(key) !== chain.network.chainId) {
+      for (const [key, entry2] of Object.entries(value.chains)) {
+        if (Number(key) !== entry2.network.chainId) {
           context.addIssue({
             code: "custom",
-            message: `Skill chain key ${key} does not match its network.chainId ${chain.network.chainId}.`
+            message: `${label} chain key ${key} does not match its network.chainId ${entry2.network.chainId}.`
           });
         }
       }
@@ -33765,6 +34152,19 @@ var init_chains = __esm({
         });
       }
     });
+    agentEnvironmentSchema = multiChainEnvironmentSchema("Agent Service", agentActiveSchema);
+    taskEnvironmentSchema = multiChainEnvironmentSchema("Task", taskActiveSchema);
+    skillEnvironmentSchema = multiChainEnvironmentSchema("Skill", skillActiveSchema);
+    agentRegistrySchema = external_exports.strictObject({
+      schemaVersion: external_exports.literal(1),
+      protocol: external_exports.literal("agent_service_v0"),
+      deployments: deploymentsShape(agentEnvironmentSchema)
+    });
+    taskRegistrySchema = external_exports.strictObject({
+      schemaVersion: external_exports.literal(1),
+      protocol: external_exports.literal("task_protocol_v0"),
+      deployments: deploymentsShape(taskEnvironmentSchema)
+    });
     skillRegistrySchema = external_exports.strictObject({
       schemaVersion: external_exports.literal(1),
       protocol: external_exports.literal("skill_protocol_v3"),
@@ -33782,22 +34182,21 @@ var init_chains = __esm({
       legacySkillIndexerRegistrySchema,
       legacy_skill_indexer_default
     );
-    AGENT_CLIENT_DEPLOYMENT_BY_CHAIN = Object.freeze({
-      8453: "production",
-      84532: "test"
-    });
-    TASK_CLIENT_DEPLOYMENT_BY_CHAIN = Object.freeze({
-      8453: "production",
-      84532: "test"
-    });
+    AGENT_CLIENT_DEPLOYMENT_BY_CHAIN = clientDeploymentsByChain(agentRegistry.protocol, agentRegistry.deployments);
+    TASK_CLIENT_DEPLOYMENT_BY_CHAIN = clientDeploymentsByChain(taskRegistry.protocol, taskRegistry.deployments);
     SKILL_CLIENT_DEPLOYMENT_BY_CHAIN = Object.freeze({
       1: "production",
       10: "production",
       56: "production",
       8453: "production",
       42161: "production",
+      43114: "production",
       84532: "test"
     });
+    REVIEWED_NETWORKS = Object.freeze({
+      test: reviewedNetworks("test"),
+      production: reviewedNetworks("production")
+    });
   }
 });
 
@@ -33942,12 +34341,15 @@ var internal_apps_default;
 var init_internal_apps = __esm({
   "../../packages/deployment-manifest/src/platform/internal-apps.json"() {
     internal_apps_default = {
-      schemaVersion: 1,
+      schemaVersion: 2,
       kind: "internal_apps",
       environments: {
         local: {
           data: {
-            sessionTtlSeconds: 28800
+            sessionTtlSeconds: 28800,
+            queryAgentEnabled: true,
+            aiBaseUrl: "https://api.tokenrouter.com/v1",
+            aiModel: "xiaomi/mimo-v2.6-flash"
           },
           ops: {
             sessionTtlSeconds: 28800,
@@ -33956,7 +34358,10 @@ var init_internal_apps = __esm({
         },
         test: {
           data: {
-            sessionTtlSeconds: 28800
+            sessionTtlSeconds: 28800,
+            queryAgentEnabled: true,
+            aiBaseUrl: "https://api.tokenrouter.com/v1",
+            aiModel: "xiaomi/mimo-v2.6-flash"
           },
           ops: {
             sessionTtlSeconds: 28800,
@@ -33965,7 +34370,10 @@ var init_internal_apps = __esm({
         },
         production: {
           data: {
-            sessionTtlSeconds: 28800
+            sessionTtlSeconds: 28800,
+            queryAgentEnabled: false,
+            aiBaseUrl: "https://api.tokenrouter.com/v1",
+            aiModel: "xiaomi/mimo-v2.6-flash"
           },
           ops: {
             sessionTtlSeconds: 28800,
@@ -34044,6 +34452,15 @@ var init_skill_delivery = __esm({
                 pkpId: "0xdf87a5d625926cedc0ad0ef74888adb643936f25",
                 groupId: 1
               }
+            },
+            "43114": {
+              chainId: 43114,
+              chainTag: "avalanche",
+              lit: {
+                provider: "chipotle",
+                pkpId: "0xdf87a5d625926cedc0ad0ef74888adb643936f25",
+                groupId: 1
+              }
             }
           }
         }
@@ -34207,6 +34624,31 @@ var init_merchant_avatar_video2 = __esm({
   }
 });
 
+// ../../packages/deployment-manifest/src/platform/generator.json
+var generator_default;
+var init_generator = __esm({
+  "../../packages/deployment-manifest/src/platform/generator.json"() {
+    generator_default = {
+      schemaVersion: 1,
+      kind: "generator",
+      provider: { endpoint: "https://api.tokenrouter.com/v1", model: "openai/gpt-6-luna" },
+      environments: { local: { enabled: true }, test: { enabled: true }, production: { enabled: false } }
+    };
+  }
+});
+
+// ../../packages/deployment-manifest/src/platform/generator.ts
+var policy3, manifest4;
+var init_generator2 = __esm({
+  "../../packages/deployment-manifest/src/platform/generator.ts"() {
+    "use strict";
+    init_zod();
+    init_generator();
+    policy3 = external_exports.strictObject({ enabled: external_exports.boolean() });
+    manifest4 = external_exports.strictObject({ schemaVersion: external_exports.literal(1), kind: external_exports.literal("generator"), provider: external_exports.strictObject({ endpoint: external_exports.literal("https://api.tokenrouter.com/v1"), model: external_exports.literal("openai/gpt-6-luna") }), environments: external_exports.strictObject({ local: policy3, test: policy3, production: policy3 }) }).parse(generator_default);
+  }
+});
+
 // ../../packages/deployment-manifest/src/platform/index.ts
 function parseManifest2(label, schema5, value) {
   const parsed2 = schema5.safeParse(value);
@@ -34244,7 +34686,7 @@ function getSkillDeliveryDeployment(environment3, chainId) {
   });
 }
 function getSkillDeliveryDeploymentByChainId(chainId) {
-  const environment3 = chainId === 84532 ? "test" : [1, 10, 56, 8453, 42161].includes(chainId) ? "production" : void 0;
+  const environment3 = chainId === 84532 ? "test" : [1, 10, 56, 8453, 42161, 43114].includes(chainId) ? "production" : void 0;
   if (!environment3) throw new DeploymentManifestError(`Skill delivery has no reviewed binding for chain ${chainId}.`);
   return getSkillDeliveryDeployment(environment3, chainId);
 }
@@ -34264,18 +34706,26 @@ var init_platform = __esm({
     init_task_platform();
     init_agenton_payout2();
     init_merchant_avatar_video2();
+    init_generator2();
     internalAppSchema = external_exports.strictObject({
       sessionTtlSeconds: external_exports.number().int().min(60).max(24 * 60 * 60)
     });
     internalAppsEnvironmentSchema = external_exports.strictObject({
-      data: internalAppSchema,
+      data: internalAppSchema.extend({
+        queryAgentEnabled: external_exports.boolean(),
+        aiBaseUrl: external_exports.url().refine((value) => {
+          const url2 = new URL(value);
+          return url2.protocol === "https:" && !url2.username && !url2.password && !url2.search && !url2.hash;
+        }, "The AI base URL must be HTTPS without credentials, query or fragment."),
+        aiModel: external_exports.string().trim().min(1).max(200)
+      }),
       ops: internalAppSchema.extend({ webOrigin: external_exports.url().refine((value) => {
         const url2 = new URL(value);
         return url2.origin === value && (url2.protocol === "https:" || value === "http://localhost:3000");
       }, "An exact reviewed Web origin is required.") })
     });
     internalAppsManifestSchema = external_exports.strictObject({
-      schemaVersion: external_exports.literal(1),
+      schemaVersion: external_exports.literal(2),
       kind: external_exports.literal("internal_apps"),
       environments: external_exports.strictObject({
         local: internalAppsEnvironmentSchema,
@@ -34325,7 +34775,7 @@ var init_platform = __esm({
     });
     skillDeliveryBindingSchema = external_exports.strictObject({
       chainId: external_exports.number().int().positive(),
-      chainTag: external_exports.enum(["base", "baseSepolia", "ethereum", "optimism", "bsc", "arbitrum"]),
+      chainTag: external_exports.enum(["base", "baseSepolia", "ethereum", "optimism", "bsc", "arbitrum", "avalanche"]),
       lit: external_exports.strictObject({
         provider: external_exports.literal("chipotle"),
         pkpId: external_exports.string().min(1).max(512),
@@ -42339,44 +42789,44 @@ var init_formatter = __esm({
 });
 
 // ../../node_modules/.pnpm/viem@2.55.15_bufferutil@4.1_ce20031be19c56210207d462110a7a29/node_modules/viem/_esm/utils/formatters/transactionRequest.js
-function formatTransactionRequest(request, _) {
+function formatTransactionRequest(request2, _) {
   const rpcRequest = {};
-  if (typeof request.authorizationList !== "undefined")
-    rpcRequest.authorizationList = formatAuthorizationList(request.authorizationList);
-  if (typeof request.accessList !== "undefined")
-    rpcRequest.accessList = request.accessList;
-  if (typeof request.blobVersionedHashes !== "undefined")
-    rpcRequest.blobVersionedHashes = request.blobVersionedHashes;
-  if (typeof request.blobs !== "undefined") {
-    if (typeof request.blobs[0] !== "string")
-      rpcRequest.blobs = request.blobs.map((x2) => bytesToHex(x2));
+  if (typeof request2.authorizationList !== "undefined")
+    rpcRequest.authorizationList = formatAuthorizationList(request2.authorizationList);
+  if (typeof request2.accessList !== "undefined")
+    rpcRequest.accessList = request2.accessList;
+  if (typeof request2.blobVersionedHashes !== "undefined")
+    rpcRequest.blobVersionedHashes = request2.blobVersionedHashes;
+  if (typeof request2.blobs !== "undefined") {
+    if (typeof request2.blobs[0] !== "string")
+      rpcRequest.blobs = request2.blobs.map((x2) => bytesToHex(x2));
     else
-      rpcRequest.blobs = request.blobs;
-  }
-  if (typeof request.data !== "undefined")
-    rpcRequest.data = request.data;
-  if (request.account)
-    rpcRequest.from = request.account.address;
-  if (typeof request.from !== "undefined")
-    rpcRequest.from = request.from;
-  if (typeof request.gas !== "undefined")
-    rpcRequest.gas = numberToHex(request.gas);
-  if (typeof request.gasPrice !== "undefined")
-    rpcRequest.gasPrice = numberToHex(request.gasPrice);
-  if (typeof request.maxFeePerBlobGas !== "undefined")
-    rpcRequest.maxFeePerBlobGas = numberToHex(request.maxFeePerBlobGas);
-  if (typeof request.maxFeePerGas !== "undefined")
-    rpcRequest.maxFeePerGas = numberToHex(request.maxFeePerGas);
-  if (typeof request.maxPriorityFeePerGas !== "undefined")
-    rpcRequest.maxPriorityFeePerGas = numberToHex(request.maxPriorityFeePerGas);
-  if (typeof request.nonce !== "undefined")
-    rpcRequest.nonce = numberToHex(request.nonce);
-  if (typeof request.to !== "undefined")
-    rpcRequest.to = request.to;
-  if (typeof request.type !== "undefined")
-    rpcRequest.type = rpcTransactionType[request.type];
-  if (typeof request.value !== "undefined")
-    rpcRequest.value = numberToHex(request.value);
+      rpcRequest.blobs = request2.blobs;
+  }
+  if (typeof request2.data !== "undefined")
+    rpcRequest.data = request2.data;
+  if (request2.account)
+    rpcRequest.from = request2.account.address;
+  if (typeof request2.from !== "undefined")
+    rpcRequest.from = request2.from;
+  if (typeof request2.gas !== "undefined")
+    rpcRequest.gas = numberToHex(request2.gas);
+  if (typeof request2.gasPrice !== "undefined")
+    rpcRequest.gasPrice = numberToHex(request2.gasPrice);
+  if (typeof request2.maxFeePerBlobGas !== "undefined")
+    rpcRequest.maxFeePerBlobGas = numberToHex(request2.maxFeePerBlobGas);
+  if (typeof request2.maxFeePerGas !== "undefined")
+    rpcRequest.maxFeePerGas = numberToHex(request2.maxFeePerGas);
+  if (typeof request2.maxPriorityFeePerGas !== "undefined")
+    rpcRequest.maxPriorityFeePerGas = numberToHex(request2.maxPriorityFeePerGas);
+  if (typeof request2.nonce !== "undefined")
+    rpcRequest.nonce = numberToHex(request2.nonce);
+  if (typeof request2.to !== "undefined")
+    rpcRequest.to = request2.to;
+  if (typeof request2.type !== "undefined")
+    rpcRequest.type = rpcTransactionType[request2.type];
+  if (typeof request2.value !== "undefined")
+    rpcRequest.value = numberToHex(request2.value);
   return rpcRequest;
 }
 function formatAuthorizationList(authorizationList) {
@@ -42798,7 +43248,7 @@ async function estimateMaxPriorityFeePerGas(client, args) {
   return internal_estimateMaxPriorityFeePerGas(client, args);
 }
 async function internal_estimateMaxPriorityFeePerGas(client, args) {
-  const { block: block_, chain = client.chain, request } = args || {};
+  const { block: block_, chain = client.chain, request: request2 } = args || {};
   try {
     const maxPriorityFeePerGas = chain?.fees?.maxPriorityFeePerGas ?? chain?.fees?.defaultPriorityFee;
     if (typeof maxPriorityFeePerGas === "function") {
@@ -42806,7 +43256,7 @@ async function internal_estimateMaxPriorityFeePerGas(client, args) {
       const maxPriorityFeePerGas_ = await maxPriorityFeePerGas({
         block,
         client,
-        request
+        request: request2
       });
       if (maxPriorityFeePerGas_ === null)
         throw new Error();
@@ -42846,13 +43296,13 @@ async function estimateFeesPerGas(client, args) {
   return internal_estimateFeesPerGas(client, args);
 }
 async function internal_estimateFeesPerGas(client, args) {
-  const { block: block_, chain = client.chain, request, type = "eip1559" } = args || {};
+  const { block: block_, chain = client.chain, request: request2, type = "eip1559" } = args || {};
   const baseFeeMultiplier = await (async () => {
     if (typeof chain?.fees?.baseFeeMultiplier === "function")
       return chain.fees.baseFeeMultiplier({
         block: block_,
         client,
-        request
+        request: request2
       });
     return chain?.fees?.baseFeeMultiplier ?? 1.2;
   })();
@@ -42867,7 +43317,7 @@ async function internal_estimateFeesPerGas(client, args) {
       block: block_,
       client,
       multiply,
-      request,
+      request: request2,
       type
     });
     if (fees !== null)
@@ -42876,19 +43326,19 @@ async function internal_estimateFeesPerGas(client, args) {
   if (type === "eip1559") {
     if (typeof block.baseFeePerGas !== "bigint")
       throw new Eip1559FeesNotSupportedError();
-    const maxPriorityFeePerGas = typeof request?.maxPriorityFeePerGas === "bigint" ? request.maxPriorityFeePerGas : await internal_estimateMaxPriorityFeePerGas(client, {
+    const maxPriorityFeePerGas = typeof request2?.maxPriorityFeePerGas === "bigint" ? request2.maxPriorityFeePerGas : await internal_estimateMaxPriorityFeePerGas(client, {
       block,
       chain,
-      request
+      request: request2
     });
     const baseFeePerGas = multiply(block.baseFeePerGas);
-    const maxFeePerGas = request?.maxFeePerGas ?? baseFeePerGas + maxPriorityFeePerGas;
+    const maxFeePerGas = request2?.maxFeePerGas ?? baseFeePerGas + maxPriorityFeePerGas;
     return {
       maxFeePerGas,
       maxPriorityFeePerGas
     };
   }
-  const gasPrice = request?.gasPrice ?? multiply(await getAction(client, getGasPrice, "getGasPrice")({}));
+  const gasPrice = request2?.gasPrice ?? multiply(await getAction(client, getGasPrice, "getGasPrice")({}));
   return {
     gasPrice
   };
@@ -43253,7 +43703,7 @@ async function fillTransaction(client, parameters) {
   assertRequest(parameters);
   const chainFormat = chain?.formatters?.transactionRequest?.format;
   const format3 = chainFormat || formatTransactionRequest;
-  const request = format3({
+  const request2 = format3({
     // Pick out extra data that might exist on the chain's transaction request type.
     ...extract(rest, { format: chainFormat }),
     account: account ? parseAccount(account) : void 0,
@@ -43275,7 +43725,7 @@ async function fillTransaction(client, parameters) {
   try {
     const response = await client.request({
       method: "eth_fillTransaction",
-      params: [request]
+      params: [request2]
     });
     const format4 = chain?.formatters?.transaction?.format || formatTransaction;
     const transaction2 = format4(response.tx);
@@ -43324,7 +43774,7 @@ async function fillTransaction(client, parameters) {
     return {
       raw: response.raw,
       transaction: {
-        from: request.from,
+        from: request2.from,
         ...transaction2
       },
       ...response.capabilities ? { capabilities: response.capabilities } : {}
@@ -43353,10 +43803,10 @@ var init_fillTransaction = __esm({
 
 // ../../node_modules/.pnpm/viem@2.55.15_bufferutil@4.1_ce20031be19c56210207d462110a7a29/node_modules/viem/_esm/actions/wallet/prepareTransactionRequest.js
 async function prepareTransactionRequest(client, args) {
-  let request = args;
-  request.account ??= client.account;
-  request.parameters ??= defaultParameters;
-  const { account: account_, chain = client.chain, nonceManager, parameters } = request;
+  let request2 = args;
+  request2.account ??= client.account;
+  request2.parameters ??= defaultParameters;
+  const { account: account_, chain = client.chain, nonceManager, parameters } = request2;
   const prepareTransactionRequest2 = (() => {
     if (typeof chain?.prepareTransactionRequest === "function")
       return {
@@ -43374,8 +43824,8 @@ async function prepareTransactionRequest(client, args) {
   async function getChainId2() {
     if (chainId)
       return chainId;
-    if (typeof request.chainId !== "undefined")
-      return request.chainId;
+    if (typeof request2.chainId !== "undefined")
+      return request2.chainId;
     if (chain)
       return chain.id;
     const chainId_ = await getAction(client, getChainId, "getChainId")({});
@@ -43383,14 +43833,14 @@ async function prepareTransactionRequest(client, args) {
     return chainId;
   }
   let account = account_ ? parseAccount(account_) : account_;
-  let nonce = request.nonce;
+  let nonce = request2.nonce;
   if (prepareTransactionRequest2?.fn && prepareTransactionRequest2.runAt?.includes("beforeFillTransaction")) {
-    request = await prepareTransactionRequest2.fn({ ...request, chain }, {
+    request2 = await prepareTransactionRequest2.fn({ ...request2, chain }, {
       client,
       phase: "beforeFillTransaction"
     });
-    nonce ??= request.nonce;
-    const sender = request.account ?? request.from;
+    nonce ??= request2.nonce;
+    const sender = request2.account ?? request2.from;
     account = sender ? parseAccount(sender) : void 0;
   }
   if (parameters.includes("nonce") && typeof nonce === "undefined" && account && nonceManager) {
@@ -43402,44 +43852,44 @@ async function prepareTransactionRequest(client, args) {
     });
   }
   const attemptFill = (() => {
-    if ((parameters.includes("blobVersionedHashes") || parameters.includes("sidecars")) && request.kzg && request.blobs)
+    if ((parameters.includes("blobVersionedHashes") || parameters.includes("sidecars")) && request2.kzg && request2.blobs)
       return false;
-    if (parameters.length > 0 && "feePayer" in request && request.feePayer && !("feePayerSignature" in request && request.feePayerSignature))
+    if (parameters.length > 0 && "feePayer" in request2 && request2.feePayer && !("feePayerSignature" in request2 && request2.feePayerSignature))
       return true;
     if (supportsFillTransaction.get(client.uid) === false)
       return false;
     const shouldAttempt = ["fees", "gas"].some((parameter) => parameters.includes(parameter));
     if (!shouldAttempt)
       return false;
-    if (parameters.includes("chainId") && typeof request.chainId !== "number")
+    if (parameters.includes("chainId") && typeof request2.chainId !== "number")
       return true;
     if (parameters.includes("nonce") && typeof nonce !== "number")
       return true;
-    if (parameters.includes("fees") && typeof request.gasPrice !== "bigint" && (typeof request.maxFeePerGas !== "bigint" || typeof request.maxPriorityFeePerGas !== "bigint"))
+    if (parameters.includes("fees") && typeof request2.gasPrice !== "bigint" && (typeof request2.maxFeePerGas !== "bigint" || typeof request2.maxPriorityFeePerGas !== "bigint"))
       return true;
-    if (parameters.includes("gas") && typeof request.gas !== "bigint")
+    if (parameters.includes("gas") && typeof request2.gas !== "bigint")
       return true;
     return false;
   })();
-  const fillResult = attemptFill ? await getAction(client, fillTransaction, "fillTransaction")({ ...request, nonce }).then((result2) => {
+  const fillResult = attemptFill ? await getAction(client, fillTransaction, "fillTransaction")({ ...request2, nonce }).then((result2) => {
     const { chainId: chainId2, from: from16, gas: gas2, gasPrice, nonce: nonce2, maxFeePerBlobGas, maxFeePerGas, maxPriorityFeePerGas, type: type2, ...rest } = result2.transaction;
     const feeToken = "feeToken" in rest ? rest.feeToken : void 0;
     const hasFilledFeePayerSignature = "feePayerSignature" in rest && rest.feePayerSignature !== null && typeof rest.feePayerSignature !== "undefined";
-    const shouldUseFilledFeeToken = typeof feeToken !== "undefined" && feeToken !== null && (!("feeToken" in request) || hasFilledFeePayerSignature);
+    const shouldUseFilledFeeToken = typeof feeToken !== "undefined" && feeToken !== null && (!("feeToken" in request2) || hasFilledFeePayerSignature);
     supportsFillTransaction.set(client.uid, true);
     return {
-      ...request,
+      ...request2,
       ...from16 ? { from: from16 } : {},
-      ...type2 && !request.type ? { type: type2 } : {},
+      ...type2 && !request2.type ? { type: type2 } : {},
       ...typeof chainId2 !== "undefined" ? { chainId: chainId2 } : {},
       ...typeof gas2 !== "undefined" ? { gas: gas2 } : {},
       ...typeof gasPrice !== "undefined" ? { gasPrice } : {},
       ...typeof nonce2 !== "undefined" ? { nonce: nonce2 } : {},
-      ...typeof maxFeePerBlobGas !== "undefined" && request.type !== "legacy" && request.type !== "eip2930" ? { maxFeePerBlobGas } : {},
-      ...typeof maxFeePerGas !== "undefined" && request.type !== "legacy" && request.type !== "eip2930" ? { maxFeePerGas } : {},
-      ...typeof maxPriorityFeePerGas !== "undefined" && request.type !== "legacy" && request.type !== "eip2930" ? { maxPriorityFeePerGas } : {},
+      ...typeof maxFeePerBlobGas !== "undefined" && request2.type !== "legacy" && request2.type !== "eip2930" ? { maxFeePerBlobGas } : {},
+      ...typeof maxFeePerGas !== "undefined" && request2.type !== "legacy" && request2.type !== "eip2930" ? { maxFeePerGas } : {},
+      ...typeof maxPriorityFeePerGas !== "undefined" && request2.type !== "legacy" && request2.type !== "eip2930" ? { maxPriorityFeePerGas } : {},
       ..."nonceKey" in rest && typeof rest.nonceKey !== "undefined" ? { nonceKey: rest.nonceKey } : {},
-      ..."keyAuthorization" in rest && typeof rest.keyAuthorization !== "undefined" && rest.keyAuthorization !== null && !("keyAuthorization" in request) ? { keyAuthorization: rest.keyAuthorization } : {},
+      ..."keyAuthorization" in rest && typeof rest.keyAuthorization !== "undefined" && rest.keyAuthorization !== null && !("keyAuthorization" in request2) ? { keyAuthorization: rest.keyAuthorization } : {},
       ..."feePayerSignature" in rest && typeof rest.feePayerSignature !== "undefined" && rest.feePayerSignature !== null ? { feePayerSignature: rest.feePayerSignature } : {},
       ...shouldUseFilledFeeToken ? { feeToken } : {},
       ...result2.capabilities ? { _capabilities: result2.capabilities } : {}
@@ -43447,7 +43897,7 @@ async function prepareTransactionRequest(client, args) {
   }).catch((e) => {
     const error51 = e;
     if (error51.name !== "TransactionExecutionError")
-      return request;
+      return request2;
     const executionReverted = error51.walk?.((e2) => {
       const error52 = e2;
       return error52.name === "ExecutionRevertedError";
@@ -43460,17 +43910,17 @@ async function prepareTransactionRequest(client, args) {
     });
     if (unsupported)
       supportsFillTransaction.set(client.uid, false);
-    return request;
-  }) : request;
+    return request2;
+  }) : request2;
   nonce ??= fillResult.nonce;
-  request = {
+  request2 = {
     ...fillResult,
     ...account ? { from: account?.address } : {},
     ...typeof nonce !== "undefined" ? { nonce } : {}
   };
-  const { blobs, gas, kzg, type } = request;
+  const { blobs, gas, kzg, type } = request2;
   if (prepareTransactionRequest2?.fn && prepareTransactionRequest2.runAt?.includes("beforeFillParameters")) {
-    request = await prepareTransactionRequest2.fn({ ...request, chain }, {
+    request2 = await prepareTransactionRequest2.fn({ ...request2, chain }, {
       client,
       phase: "beforeFillParameters"
     });
@@ -43483,7 +43933,7 @@ async function prepareTransactionRequest(client, args) {
     return block;
   }
   if (parameters.includes("nonce") && typeof nonce === "undefined" && account && !nonceManager)
-    request.nonce = await getAction(client, getTransactionCount, "getTransactionCount")({
+    request2.nonce = await getAction(client, getTransactionCount, "getTransactionCount")({
       address: account.address,
       blockTag: "pending"
     });
@@ -43494,7 +43944,7 @@ async function prepareTransactionRequest(client, args) {
         commitments,
         to: "hex"
       });
-      request.blobVersionedHashes = versionedHashes;
+      request2.blobVersionedHashes = versionedHashes;
     }
     if (parameters.includes("sidecars")) {
       const proofs = blobsToProofs({ blobs, commitments, kzg });
@@ -43504,14 +43954,14 @@ async function prepareTransactionRequest(client, args) {
         proofs,
         to: "hex"
       });
-      request.sidecars = sidecars;
+      request2.sidecars = sidecars;
     }
   }
   if (parameters.includes("chainId"))
-    request.chainId = await getChainId2();
+    request2.chainId = await getChainId2();
   if ((parameters.includes("fees") || parameters.includes("type")) && typeof type === "undefined") {
     try {
-      request.type = getTransactionType(request);
+      request2.type = getTransactionType(request2);
     } catch {
       let isEip1559Network = eip1559NetworkCache.get(client.uid);
       if (typeof isEip1559Network === "undefined") {
@@ -43519,54 +43969,54 @@ async function prepareTransactionRequest(client, args) {
         isEip1559Network = typeof block2?.baseFeePerGas === "bigint";
         eip1559NetworkCache.set(client.uid, isEip1559Network);
       }
-      request.type = isEip1559Network ? "eip1559" : "legacy";
+      request2.type = isEip1559Network ? "eip1559" : "legacy";
     }
   }
   if (parameters.includes("fees")) {
-    if (request.type !== "legacy" && request.type !== "eip2930") {
-      if (typeof request.maxFeePerGas === "undefined" || typeof request.maxPriorityFeePerGas === "undefined") {
+    if (request2.type !== "legacy" && request2.type !== "eip2930") {
+      if (typeof request2.maxFeePerGas === "undefined" || typeof request2.maxPriorityFeePerGas === "undefined") {
         const block2 = await getBlock2();
         const { maxFeePerGas, maxPriorityFeePerGas } = await internal_estimateFeesPerGas(client, {
           block: block2,
           chain,
-          request
+          request: request2
         });
-        if (typeof request.maxPriorityFeePerGas === "undefined" && request.maxFeePerGas && request.maxFeePerGas < maxPriorityFeePerGas)
+        if (typeof request2.maxPriorityFeePerGas === "undefined" && request2.maxFeePerGas && request2.maxFeePerGas < maxPriorityFeePerGas)
           throw new MaxFeePerGasTooLowError({
             maxPriorityFeePerGas
           });
-        request.maxPriorityFeePerGas = maxPriorityFeePerGas;
-        request.maxFeePerGas = maxFeePerGas;
+        request2.maxPriorityFeePerGas = maxPriorityFeePerGas;
+        request2.maxFeePerGas = maxFeePerGas;
       }
     } else {
-      if (typeof request.maxFeePerGas !== "undefined" || typeof request.maxPriorityFeePerGas !== "undefined")
+      if (typeof request2.maxFeePerGas !== "undefined" || typeof request2.maxPriorityFeePerGas !== "undefined")
         throw new Eip1559FeesNotSupportedError();
-      if (typeof request.gasPrice === "undefined") {
+      if (typeof request2.gasPrice === "undefined") {
         const block2 = await getBlock2();
         const { gasPrice: gasPrice_ } = await internal_estimateFeesPerGas(client, {
           block: block2,
           chain,
-          request,
+          request: request2,
           type: "legacy"
         });
-        request.gasPrice = gasPrice_;
+        request2.gasPrice = gasPrice_;
       }
     }
   }
   if (parameters.includes("gas") && typeof gas === "undefined")
-    request.gas = await getAction(client, estimateGas, "estimateGas")({
-      ...request,
+    request2.gas = await getAction(client, estimateGas, "estimateGas")({
+      ...request2,
       account,
       prepare: account?.type === "local" ? [] : ["blobVersionedHashes"]
     });
   if (prepareTransactionRequest2?.fn && prepareTransactionRequest2.runAt?.includes("afterFillParameters"))
-    request = await prepareTransactionRequest2.fn({ ...request, chain }, {
+    request2 = await prepareTransactionRequest2.fn({ ...request2, chain }, {
       client,
       phase: "afterFillParameters"
     });
-  assertRequest(request);
-  delete request.parameters;
-  return request;
+  assertRequest(request2);
+  delete request2.parameters;
+  return request2;
 }
 var defaultParameters, eip1559NetworkCache, supportsFillTransaction;
 var init_prepareTransactionRequest = __esm({
@@ -43636,7 +44086,7 @@ async function estimateGas(client, args) {
     assertRequest(args);
     const chainFormat = client.chain?.formatters?.transactionRequest?.format;
     const format3 = chainFormat || formatTransactionRequest;
-    const request = format3({
+    const request2 = format3({
       // Pick out extra data that might exist on the chain's transaction request type.
       ...extract(rest, { format: chainFormat }),
       account,
@@ -43656,10 +44106,10 @@ async function estimateGas(client, args) {
     return BigInt(await client.request({
       method: "eth_estimateGas",
       params: rpcStateOverride ? [
-        request,
+        request2,
         block ?? client.experimental_blockTag ?? "latest",
         rpcStateOverride
-      ] : block ? [request, block] : [request]
+      ] : block ? [request2, block] : [request2]
     }));
   } catch (err2) {
     throw getEstimateGasError(err2, {
@@ -43686,7 +44136,7 @@ var init_estimateGas2 = __esm({
 
 // ../../node_modules/.pnpm/viem@2.55.15_bufferutil@4.1_ce20031be19c56210207d462110a7a29/node_modules/viem/_esm/actions/public/estimateContractGas.js
 async function estimateContractGas(client, parameters) {
-  const { abi: abi2, address: address2, args, functionName, dataSuffix = typeof client.dataSuffix === "string" ? client.dataSuffix : client.dataSuffix?.value, ...request } = parameters;
+  const { abi: abi2, address: address2, args, functionName, dataSuffix = typeof client.dataSuffix === "string" ? client.dataSuffix : client.dataSuffix?.value, ...request2 } = parameters;
   const data = encodeFunctionData({
     abi: abi2,
     args,
@@ -43696,11 +44146,11 @@ async function estimateContractGas(client, parameters) {
     const gas = await getAction(client, estimateGas, "estimateGas")({
       data: `${data}${dataSuffix ? dataSuffix.replace("0x", "") : ""}`,
       to: address2,
-      ...request
+      ...request2
     });
     return gas;
   } catch (error51) {
-    const account = request.account ? parseAccount(request.account) : void 0;
+    const account = request2.account ? parseAccount(request2.account) : void 0;
     throw getContractError(error51, {
       abi: abi2,
       address: address2,
@@ -45970,7 +46420,7 @@ async function call(client, args) {
     const rpcStateOverride = serializeStateOverride(stateOverride);
     const chainFormat = client.chain?.formatters?.transactionRequest?.format;
     const format3 = chainFormat || formatTransactionRequest;
-    const request = format3({
+    const request2 = format3({
       // Pick out extra data that might exist on the chain's transaction request type.
       ...extract(rest, { format: chainFormat }),
       accessList,
@@ -45987,7 +46437,7 @@ async function call(client, args) {
       to: deploylessCall ? void 0 : to,
       value
     }, "call");
-    if (batch && shouldPerformMulticall({ request }) && !rpcBlockOverrides && blockHash === void 0) {
+    if (batch && shouldPerformMulticall({ request: request2 }) && !rpcBlockOverrides && blockHash === void 0) {
       try {
         const { deployless = false } = typeof client.batch?.multicall === "object" ? client.batch.multicall : {};
         const multicallAddress = getMulticallAddress(client, {
@@ -45996,7 +46446,7 @@ async function call(client, args) {
         });
         if (!multicallAddress || !hasStateOverrideForAddress(rpcStateOverride, multicallAddress))
           return await scheduleMulticall(client, {
-            ...request,
+            ...request2,
             blockHash,
             blockNumber: blockNumber2,
             blockTag,
@@ -46012,7 +46462,7 @@ async function call(client, args) {
     }
     const params = (() => {
       const base3 = [
-        request,
+        request2,
         block
       ];
       if (rpcStateOverride && rpcBlockOverrides)
@@ -46050,8 +46500,8 @@ async function call(client, args) {
     });
   }
 }
-function shouldPerformMulticall({ request }) {
-  const { data, to, ...request_ } = request;
+function shouldPerformMulticall({ request: request2 }) {
+  const { data, to, ...request_ } = request2;
   if (!data)
     return false;
   if (data.startsWith(aggregate3Signature))
@@ -46095,10 +46545,10 @@ async function scheduleMulticall(client, args) {
       return size5 > batchSize * 2;
     },
     fn: async (requests) => {
-      const calls = requests.map((request) => ({
+      const calls = requests.map((request2) => ({
         allowFailure: true,
-        callData: request.data,
-        target: request.to
+        callData: request2.data,
+        target: request2.to
       }));
       const calldata = encodeFunctionData({
         abi: multicall3Abi,
@@ -46790,7 +47240,7 @@ async function sendTransaction(client, parameters) {
       }
       const chainFormat = client.chain?.formatters?.transactionRequest?.format;
       const format3 = chainFormat || formatTransactionRequest;
-      const request = format3({
+      const request2 = format3({
         // Pick out extra data that might exist on the chain's transaction request type.
         ...extract(rest, { format: chainFormat }),
         accessList,
@@ -46814,7 +47264,7 @@ async function sendTransaction(client, parameters) {
       try {
         return await client.request({
           method: method2,
-          params: [request]
+          params: [request2]
         }, { retryCount: 0 });
       } catch (e) {
         if (isWalletNamespaceSupported === false)
@@ -46823,7 +47273,7 @@ async function sendTransaction(client, parameters) {
         if (error51.name === "InvalidInputRpcError" || error51.name === "InvalidParamsRpcError" || error51.name === "MethodNotFoundRpcError" || error51.name === "MethodNotSupportedRpcError") {
           return await client.request({
             method: "wallet_sendTransaction",
-            params: [request]
+            params: [request2]
           }, { retryCount: 0 }).then((hash5) => {
             supportsWalletNamespace.set(client.uid, true);
             return hash5;
@@ -46863,7 +47313,7 @@ async function sendTransaction(client, parameters) {
           }
         };
       })();
-      const request = await getAction(client, prepareTransactionRequest, "prepareTransactionRequest")({
+      const request2 = await getAction(client, prepareTransactionRequest, "prepareTransactionRequest")({
         account,
         accessList,
         authorizationList,
@@ -46884,7 +47334,7 @@ async function sendTransaction(client, parameters) {
         to
       });
       const serializer = chain?.serializers?.transaction;
-      const serializedTransaction = await account.signTransaction(request, {
+      const serializedTransaction = await account.signTransaction(request2, {
         serializer
       });
       return await getAction(client, sendRawTransaction, "sendRawTransaction")({
@@ -46951,7 +47401,7 @@ var init_writeContract = __esm({
     init_sendTransaction();
     (function(writeContract2) {
       async function internal(client, actionFn, name, parameters) {
-        const { abi: abi2, account: account_ = client.account, address: address2, args, functionName, ...request } = parameters;
+        const { abi: abi2, account: account_ = client.account, address: address2, args, functionName, ...request2 } = parameters;
         if (typeof account_ === "undefined")
           throw new AccountNotFoundError({
             docsPath: "/docs/contract/writeContract"
@@ -46967,7 +47417,7 @@ var init_writeContract = __esm({
             data,
             to: address2,
             account,
-            ...request
+            ...request2
           });
         } catch (error51) {
           throw getContractError(error51, {
@@ -47393,7 +47843,7 @@ function createClient(parameters) {
   const pollingInterval = parameters.pollingInterval ?? defaultPollingInterval;
   const cacheTime = parameters.cacheTime ?? pollingInterval;
   const account = parameters.account ? parseAccount(parameters.account) : void 0;
-  const { config: config2, request, value } = parameters.transport({
+  const { config: config2, request: request2, value } = parameters.transport({
     account,
     chain,
     pollingInterval
@@ -47409,7 +47859,7 @@ function createClient(parameters) {
     key,
     name,
     pollingInterval,
-    request,
+    request: request2,
     tokens,
     transport,
     type,
@@ -48144,7 +48594,7 @@ async function createAccessList(client, args) {
     const block = blockNumberHex || blockTag;
     const chainFormat = client.chain?.formatters?.transactionRequest?.format;
     const format3 = chainFormat || formatTransactionRequest;
-    const request = format3({
+    const request2 = format3({
       // Pick out extra data that might exist on the chain's transaction request type.
       ...extract(rest, { format: chainFormat }),
       account,
@@ -48160,7 +48610,7 @@ async function createAccessList(client, args) {
     }, "createAccessList");
     const response = await client.request({
       method: "eth_createAccessList",
-      params: [request, block]
+      params: [request2, block]
     });
     if (response.error)
       throw new BaseError2(response.error, { details: response.error });
@@ -48937,7 +49387,7 @@ var init_withDedupe = __esm({
 });
 
 // ../../node_modules/.pnpm/viem@2.55.15_bufferutil@4.1_ce20031be19c56210207d462110a7a29/node_modules/viem/_esm/utils/buildRequest.js
-function buildRequest(request, options = {}) {
+function buildRequest(request2, options = {}) {
   return async (args, overrideOptions = {}) => {
     const { dedupe = false, methods, retryDelay = 150, retryCount = 3, signal, uid: uid2 } = {
       ...options,
@@ -48957,7 +49407,7 @@ function buildRequest(request, options = {}) {
     const requestId = dedupe ? hashString(`${uid2}.${stringify(args)}`) : void 0;
     return withDedupe(() => withRetry(async () => {
       try {
-        return await request(args, signal ? { signal } : void 0);
+        return await request2(args, signal ? { signal } : void 0);
       } catch (err_) {
         if (signal?.aborted)
           throw getAbortError(signal);
@@ -49243,8 +49693,8 @@ function getHttpRpcClient(url_, options = {}) {
             method: method2 || "POST",
             signal: signal_ || (timeout > 0 ? signal : null)
           };
-          const request = new Request(url2, init);
-          const args = await onRequest?.(request, init) ?? { ...init, url: url2 };
+          const request2 = new Request(url2, init);
+          const args = await onRequest?.(request2, init) ?? { ...init, url: url2 };
           const response2 = await fetchFn(args.url ?? url2, args);
           return response2;
         }, {
@@ -51803,14 +52253,14 @@ async function simulateBlocks(client, parameters) {
         const call2 = call_;
         const account = call2.account ? parseAccount(call2.account) : void 0;
         const data = call2.abi ? encodeFunctionData(call2) : call2.data;
-        const request = {
+        const request2 = {
           ...call2,
           account,
           data: call2.dataSuffix ? concat2([data || "0x", call2.dataSuffix]) : data,
           from: call2.from ?? account?.address
         };
-        assertRequest(request);
-        return formatTransactionRequest(request);
+        assertRequest(request2);
+        return formatTransactionRequest(request2);
       });
       const stateOverrides = block2.stateOverrides ? serializeStateOverride(block2.stateOverrides) : void 0;
       blockStateCalls.push({
@@ -53882,7 +54332,7 @@ async function sendTransactionSync(client, parameters) {
       }
       const chainFormat = client.chain?.formatters?.transactionRequest?.format;
       const format3 = chainFormat || formatTransactionRequest;
-      const request = format3({
+      const request2 = format3({
         // Pick out extra data that might exist on the chain's transaction request type.
         ...extract(rest, { format: chainFormat }),
         accessList,
@@ -53907,7 +54357,7 @@ async function sendTransactionSync(client, parameters) {
         try {
           return await client.request({
             method: method2,
-            params: [request]
+            params: [request2]
           }, { retryCount: 0 });
         } catch (e) {
           if (isWalletNamespaceSupported === false)
@@ -53916,7 +54366,7 @@ async function sendTransactionSync(client, parameters) {
           if (error51.name === "InvalidInputRpcError" || error51.name === "InvalidParamsRpcError" || error51.name === "MethodNotFoundRpcError" || error51.name === "MethodNotSupportedRpcError") {
             return await client.request({
               method: "wallet_sendTransaction",
-              params: [request]
+              params: [request2]
             }, { retryCount: 0 }).then((hash6) => {
               supportsWalletNamespace2.set(client.uid, true);
               return hash6;
@@ -53966,7 +54416,7 @@ async function sendTransactionSync(client, parameters) {
           }
         };
       })();
-      const request = await getAction(client, prepareTransactionRequest, "prepareTransactionRequest")({
+      const request2 = await getAction(client, prepareTransactionRequest, "prepareTransactionRequest")({
         account,
         accessList,
         authorizationList,
@@ -53987,7 +54437,7 @@ async function sendTransactionSync(client, parameters) {
         to
       });
       const serializer = chain?.serializers?.transaction;
-      const serializedTransaction = await account.signTransaction(request, {
+      const serializedTransaction = await account.signTransaction(request2, {
         serializer
       });
       return await getAction(client, sendRawTransactionSync, "sendRawTransactionSync")({
@@ -54524,11 +54974,11 @@ var init_addChain = __esm({
 
 // ../../node_modules/.pnpm/viem@2.55.15_bufferutil@4.1_ce20031be19c56210207d462110a7a29/node_modules/viem/_esm/actions/wallet/deployContract.js
 function deployContract(walletClient, parameters) {
-  const { abi: abi2, args, bytecode, ...request } = parameters;
+  const { abi: abi2, args, bytecode, ...request2 } = parameters;
   const calldata = encodeDeployData({ abi: abi2, args, bytecode });
   return sendTransaction(walletClient, {
-    ...request,
-    ...request.authorizationList ? { to: null } : {},
+    ...request2,
+    ...request2.authorizationList ? { to: null } : {},
     data: calldata
   });
 }
@@ -54951,20 +55401,20 @@ var init_createWalletClient = __esm({
 });
 
 // ../../node_modules/.pnpm/viem@2.55.15_bufferutil@4.1_ce20031be19c56210207d462110a7a29/node_modules/viem/_esm/clients/transports/createTransport.js
-function createTransport({ key, methods, name, request, retryCount = 3, retryDelay = 150, timeout, type }, value) {
+function createTransport({ key, methods, name, request: request2, retryCount = 3, retryDelay = 150, timeout, type }, value) {
   const uid2 = uid();
   return {
     config: {
       key,
       methods,
       name,
-      request,
+      request: request2,
       retryCount,
       retryDelay,
       timeout,
       type
     },
-    request: buildRequest(request, { methods, retryCount, retryDelay, uid: uid2 }),
+    request: buildRequest(request2, { methods, retryCount, retryDelay, uid: uid2 }),
     value
   };
 }
@@ -55350,6 +55800,7 @@ var init_api2 = __esm({
   "src/api.ts"() {
     "use strict";
     import_ajv = __toESM(require_ajv(), 1);
+    init_package();
     init_cli_error();
     init_src2();
     init_v1();
@@ -55554,6 +56005,23 @@ var init_api2 = __esm({
           throw new CliHttpError("CLI_REMOTE_UNAVAILABLE", null, { cause });
         }
       }
+      async authorizationServerMetadata() {
+        const authorizationResponse = await this.publicFetch("/.well-known/oauth-authorization-server");
+        if (authorizationResponse.status !== 200) {
+          await authorizationResponse.body?.cancel().catch(() => void 0);
+          throw new CliHttpError("CLI_REMOTE_UNAVAILABLE", authorizationResponse.status);
+        }
+        const authorization = jsonObject(await readBoundedJson(authorizationResponse));
+        if (authorization.issuer !== this.origin || authorization.authorization_endpoint !== `${this.origin}/oauth/authorize` || !sameOriginEndpoint(authorization.token_endpoint, this.origin) || !sameOriginEndpoint(authorization.registration_endpoint, this.origin) || !includesCapabilities(authorization.response_types_supported, ["code"]) || !includesCapabilities(authorization.grant_types_supported, ["authorization_code", "refresh_token"]) || !includesCapabilities(authorization.token_endpoint_auth_methods_supported, ["none"]) || !includesCapabilities(authorization.code_challenge_methods_supported, ["S256"]) || !["boolean", "undefined"].includes(typeof authorization.authorization_response_iss_parameter_supported)) {
+          throw new CliHttpError("CLI_RESPONSE_INVALID", authorizationResponse.status);
+        }
+        return authorization;
+      }
+      /** The issuer every authorization response must carry as `iss` (RFC 9207), or null when none is advertised. */
+      async authorizationResponseIssuer() {
+        const metadata = await this.authorizationServerMetadata();
+        return metadata.authorization_response_iss_parameter_supported === true ? this.origin : null;
+      }
       async inspectRemoteMcp() {
         const mcpUrl = `${this.origin}/mcp`;
         const compatibilityManifestUrl = `${this.origin}/mcp/client-compatibility.json`;
@@ -55580,15 +56048,7 @@ var init_api2 = __esm({
         if (resource.resource !== resourceMetadataAuthority.resource || !includesCapabilities(resource.authorization_servers, [this.origin])) {
           throw new CliHttpError("CLI_RESPONSE_INVALID", resourceResponse.status);
         }
-        const authorizationResponse = await this.publicFetch("/.well-known/oauth-authorization-server");
-        if (authorizationResponse.status !== 200) {
-          await authorizationResponse.body?.cancel().catch(() => void 0);
-          throw new CliHttpError("CLI_REMOTE_UNAVAILABLE", authorizationResponse.status);
-        }
-        const authorization = jsonObject(await readBoundedJson(authorizationResponse));
-        if (authorization.issuer !== this.origin || authorization.authorization_endpoint !== `${this.origin}/oauth/authorize` || !sameOriginEndpoint(authorization.token_endpoint, this.origin) || !sameOriginEndpoint(authorization.registration_endpoint, this.origin) || !includesCapabilities(authorization.response_types_supported, ["code"]) || !includesCapabilities(authorization.grant_types_supported, ["authorization_code", "refresh_token"]) || !includesCapabilities(authorization.token_endpoint_auth_methods_supported, ["none"]) || !includesCapabilities(authorization.code_challenge_methods_supported, ["S256"])) {
-          throw new CliHttpError("CLI_RESPONSE_INVALID", authorizationResponse.status);
-        }
+        await this.authorizationServerMetadata();
         return Object.freeze({
           url: mcpUrl,
           transport: "streamable_http",
@@ -55924,7 +56384,8 @@ var init_api2 = __esm({
           errorContract: "oauth",
           responseSchema: oauthAuthorizationResponseSchema,
           bearer,
-          body: {}
+          body: {},
+          headers: { [AGENT_CLI_MCP_AUTHORIZATION_CLIENT.versionHeader]: package_default.version }
         });
       }
       createChallenge(input) {
@@ -56645,6 +57106,84 @@ var init_skill_buyer_intent_journal = __esm({
   }
 });
 
+// src/loopback-callback.ts
+import { lookup } from "node:dns/promises";
+import { request } from "node:http";
+import { isIP } from "node:net";
+function isLoopbackHttpUrl(url2) {
+  return url2.protocol === "http:" && ["localhost", "127.0.0.1", "[::1]"].includes(url2.hostname);
+}
+function isLoopbackAddress(address2) {
+  return address2 === "::1" || /^127\./u.test(address2);
+}
+function attempt(url2, address2, port) {
+  return new Promise((resolve4, reject5) => {
+    let connected = false;
+    const outgoing = request({
+      host: address2,
+      port,
+      method: "GET",
+      path: `${url2.pathname}${url2.search}`,
+      family: isIP(address2),
+      headers: { host: url2.host, connection: "close" },
+      timeout: DELIVERY_TIMEOUT_MILLISECONDS
+    }, (response) => {
+      let received = 0;
+      response.on("data", (chunk) => {
+        received += chunk.byteLength;
+        if (received > MAXIMUM_RESPONSE_BYTES) response.destroy();
+      });
+      response.on("close", () => {
+        const status = response.statusCode ?? 0;
+        if (status >= 200 && status < 400) resolve4("delivered");
+        else reject5(new McpAuthorizationFlowError("callback_rejected", { callbackStatus: status }));
+      });
+    });
+    outgoing.on("socket", (socket) => {
+      socket.once("connect", () => {
+        connected = true;
+      });
+    });
+    outgoing.on("timeout", () => outgoing.destroy(new Error("timeout")));
+    outgoing.on("error", (cause) => {
+      if (!connected) resolve4("not_connected");
+      else reject5(new McpAuthorizationFlowError("callback_delivery_unknown", {}, { cause }));
+    });
+    outgoing.end();
+  });
+}
+var DELIVERY_TIMEOUT_MILLISECONDS, MAXIMUM_RESPONSE_BYTES, LoopbackCallbackDelivery;
+var init_loopback_callback = __esm({
+  "src/loopback-callback.ts"() {
+    "use strict";
+    init_cli_error();
+    DELIVERY_TIMEOUT_MILLISECONDS = 15e3;
+    MAXIMUM_RESPONSE_BYTES = 65536;
+    LoopbackCallbackDelivery = class {
+      constructor(resolve4 = async (hostname3) => (await lookup(hostname3, { all: true, verbatim: true })).map((entry2) => entry2.address), send = attempt) {
+        this.resolve = resolve4;
+        this.send = send;
+      }
+      resolve;
+      send;
+      async deliver(callbackUrl) {
+        const url2 = new URL(callbackUrl);
+        if (!isLoopbackHttpUrl(url2)) throw new TypeError("OAuth callback is not a loopback HTTP address.");
+        const addresses = url2.hostname === "localhost" ? await this.resolve("localhost") : [url2.hostname === "[::1]" ? "::1" : url2.hostname];
+        const loopback = addresses.filter(isLoopbackAddress);
+        if (loopback.length === 0 || loopback.length !== addresses.length) {
+          throw new McpAuthorizationFlowError("callback_unreachable");
+        }
+        const port = url2.port === "" ? 80 : Number(url2.port);
+        for (const address2 of loopback) {
+          if (await this.send(url2, address2, port) === "delivered") return;
+        }
+        throw new McpAuthorizationFlowError("callback_unreachable");
+      }
+    };
+  }
+});
+
 // src/application.ts
 import { createHash as createHash2, randomUUID } from "node:crypto";
 import { open as open2 } from "node:fs/promises";
@@ -56913,7 +57452,7 @@ function parseTaskRecoveryJournal(value, expected) {
     idempotencyKey: journal.idempotencyKey
   });
 }
-var FinchCliApplication;
+var MAXIMUM_STDIN_AUTHORIZATION_BYTES, FinchCliApplication;
 var init_application = __esm({
   "src/application.ts"() {
     "use strict";
@@ -56927,6 +57466,8 @@ var init_application = __esm({
     init_state();
     init_skill_buyer_intent_journal();
     init_cli_error();
+    init_loopback_callback();
+    MAXIMUM_STDIN_AUTHORIZATION_BYTES = 4098;
     FinchCliApplication = class {
       api;
       state;
@@ -56940,6 +57481,9 @@ var init_application = __esm({
       skillIntentSender;
       skillLocalFlow;
       browserLauncher;
+      callbackDelivery;
+      mcpLoginProcess;
+      stdin;
       constructor(dependencies) {
         this.api = dependencies.api;
         this.state = dependencies.state;
@@ -56953,6 +57497,9 @@ var init_application = __esm({
         this.skillIntentSender = dependencies.skillIntentSender;
         this.skillLocalFlow = dependencies.skillLocalFlow;
         this.browserLauncher = dependencies.browserLauncher;
+        this.callbackDelivery = dependencies.callbackDelivery;
+        this.mcpLoginProcess = dependencies.mcpLoginProcess;
+        this.stdin = dependencies.stdin;
       }
       async authorizedProfile() {
         return this.activeProfile ?? await required2(this.state.readProfile, "state.readProfile").call(this.state);
@@ -57155,8 +57702,8 @@ var init_application = __esm({
         const handoffId = this.randomUuid();
         const token = this.randomBearer();
         const tokenCommitment = `0x${createHash2("sha256").update(token, "utf8").digest("hex")}`;
-        const request = { handoffId, tokenCommitment };
-        const response = input.requestId === void 0 ? await required2(this.api.createBrowserHandoff, "api.createBrowserHandoff").call(this.api, request, input.session.rawBearer) : await required2(this.api.bindBrowserHandoff, "api.bindBrowserHandoff").call(this.api, { ...request, requestId: input.requestId }, input.session.rawBearer);
+        const request2 = { handoffId, tokenCommitment };
+        const response = input.requestId === void 0 ? await required2(this.api.createBrowserHandoff, "api.createBrowserHandoff").call(this.api, request2, input.session.rawBearer) : await required2(this.api.bindBrowserHandoff, "api.bindBrowserHandoff").call(this.api, { ...request2, requestId: input.requestId }, input.session.rawBearer);
         const bound = asObject(response, "Browser handoff");
         if (bound.accountId !== input.session.accountId || bound.environment !== input.session.environment || String(bound.walletAddress).toLowerCase() !== input.session.walletAddress.toLowerCase()) {
           throw new CliAuthorityError();
@@ -57188,19 +57735,45 @@ var init_application = __esm({
         const authority = await this.verifiedAgentCliAuthority();
         return this.openBrowserHandoff({ ...authority, requestId: match[1] });
       }
+      /** Layer 3: the shell-safe request token shown on the Finch authorization page. */
       async authorizeMcp(requestToken) {
+        return this.authorizeMcpRequest(decodeAgentCliMcpAuthorizationRequest(requestToken));
+      }
+      /** Layer 2: one raw authorization URL on standard input, which argv cannot carry intact on Windows. */
+      async authorizeMcpFromStdin() {
+        const input = await required2(this.stdin, "stdin").readAll(MAXIMUM_STDIN_AUTHORIZATION_BYTES);
+        const requestUrl = input.replace(/\r?\n$/u, "");
+        if (requestUrl.length === 0 || /\s/u.test(requestUrl)) {
+          throw new McpAuthorizationFlowError("stdin_invalid");
+        }
+        return this.authorizeMcpRequest(requestUrl);
+      }
+      /** Layer 1: run the MCP client's own login command and approve the URL it prints. */
+      async connectMcp(command) {
+        const profile = await this.authorizedProfile();
+        await this.verifiedAgentCliAuthority();
+        const session = required2(this.mcpLoginProcess, "MCP login process").start(command, profile.origin);
+        try {
+          const requestUrl = await session.authorizationUrl();
+          const result2 = await this.authorizeMcpRequest(requestUrl, (code) => session.redact(code));
+          await session.waitForExit();
+          return Object.freeze({ ...result2, loginCommandExitCode: 0 });
+        } finally {
+          session.close();
+        }
+      }
+      async authorizeMcpRequest(requestUrl, onAuthorizationCode) {
         const profile = await this.authorizedProfile();
-        const requestUrl = decodeAgentCliMcpAuthorizationRequest(requestToken);
-        let request;
+        let request2;
         try {
-          request = new URL(requestUrl);
+          request2 = new URL(requestUrl);
         } catch {
           throw new TypeError("MCP OAuth request URL is invalid.");
         }
-        const redirectValues = request.searchParams.getAll("redirect_uri");
-        const stateValues = request.searchParams.getAll("state");
-        const scopeValues = request.searchParams.getAll("scope");
-        if (request.origin !== profile.origin || request.pathname !== "/oauth/authorize" || request.username !== "" || request.password !== "" || request.hash !== "" || requestUrl !== `${profile.origin}${request.pathname}${request.search}` || redirectValues.length !== 1 || stateValues.length > 1 || scopeValues.length > 1) {
+        const redirectValues = request2.searchParams.getAll("redirect_uri");
+        const stateValues = request2.searchParams.getAll("state");
+        const scopeValues = request2.searchParams.getAll("scope");
+        if (request2.origin !== profile.origin || request2.pathname !== "/oauth/authorize" || request2.username !== "" || request2.password !== "" || request2.hash !== "" || requestUrl !== `${profile.origin}${request2.pathname}${request2.search}` || redirectValues.length !== 1 || stateValues.length > 1 || scopeValues.length > 1) {
           throw new TypeError("MCP OAuth request URL does not match the active profile authority.");
         }
         let registeredRedirect;
@@ -57209,11 +57782,12 @@ var init_application = __esm({
         } catch {
           throw new TypeError("MCP OAuth redirect URI is invalid.");
         }
-        if (registeredRedirect.username !== "" || registeredRedirect.password !== "" || registeredRedirect.hash !== "") {
+        if (registeredRedirect.username !== "" || registeredRedirect.password !== "" || registeredRedirect.hash !== "" || registeredRedirect.protocol !== "https:" && !isLoopbackHttpUrl(registeredRedirect)) {
           throw new TypeError("MCP OAuth redirect URI is invalid.");
         }
         const authority = await this.verifiedAgentCliAuthority();
-        const response = asObject(await required2(this.api.authorizeMcp, "api.authorizeMcp").call(this.api, `${request.pathname}${request.search}`, authority.session.rawBearer), "MCP authorization");
+        const expectedIssuer = await required2(this.api.authorizationResponseIssuer, "api.authorizationResponseIssuer").call(this.api);
+        const response = asObject(await required2(this.api.authorizeMcp, "api.authorizeMcp").call(this.api, `${request2.pathname}${request2.search}`, authority.session.rawBearer), "MCP authorization");
         if (response.authorized !== true || response.accountId !== authority.session.accountId || String(response.walletAddress).toLowerCase() !== authority.walletAddress || typeof response.clientName !== "string" || response.clientName.length < 1 || response.clientName.length > 128 || !Array.isArray(response.scopes) || response.scopes.some((scope) => typeof scope !== "string" || scope.length < 1) || typeof response.callbackUrl !== "string") {
           throw new CliAuthorityError();
         }
@@ -57232,23 +57806,33 @@ var init_application = __esm({
         if (codes.length !== 1 || codes[0].length < 1 || callback.searchParams.has("error")) {
           throw new TypeError("MCP OAuth callback is invalid.");
         }
+        onAuthorizationCode?.(codes[0]);
         const expectedCallback = new URL(registeredRedirect.href);
         expectedCallback.searchParams.set("code", codes[0]);
         if (stateValues.length === 1) expectedCallback.searchParams.set("state", stateValues[0]);
+        if (expectedIssuer !== null) expectedCallback.searchParams.set("iss", expectedIssuer);
         const expectedParameters = new URLSearchParams(expectedCallback.search);
         const callbackParameters = new URLSearchParams(callback.search);
         expectedParameters.sort();
         callbackParameters.sort();
         if (callback.origin !== registeredRedirect.origin || callback.pathname !== registeredRedirect.pathname || callback.protocol !== registeredRedirect.protocol || callback.username !== "" || callback.password !== "" || callback.hash !== "" || callbackParameters.toString() !== expectedParameters.toString()) {
-          throw new TypeError("MCP OAuth callback does not match the registered redirect and state.");
+          throw new TypeError("MCP OAuth callback does not match the registered redirect, state, and issuer.");
+        }
+        let callbackDelivery;
+        if (isLoopbackHttpUrl(callback)) {
+          await required2(this.callbackDelivery, "callback delivery").deliver(callback.href);
+          callbackDelivery = "loopback_http";
+        } else {
+          await required2(this.browserLauncher, "browser launcher").open(callback.href);
+          callbackDelivery = "browser";
         }
-        await required2(this.browserLauncher, "browser launcher").open(callback.href);
         return Object.freeze({
           authorized: true,
           clientName: response.clientName,
           walletAddress: authority.walletAddress,
           environment: authority.session.environment,
-          scopes: Object.freeze([...returnedScopes])
+          scopes: Object.freeze([...returnedScopes]),
+          callbackDelivery
         });
       }
       async createWallet() {
@@ -58299,66 +58883,13 @@ var init_application = __esm({
   }
 });
 
-// package.json
-var package_default;
-var init_package = __esm({
-  "package.json"() {
-    package_default = {
-      name: "@finchtech/cli",
-      version: "0.3.9",
-      description: "Finch Agent CLI for wallet-owned marketplace and MCP workflows.",
-      type: "module",
-      bin: {
-        finch: "dist/finch.js",
-        finchtech: "dist/finch.js"
-      },
-      files: [
-        "dist/finch.js",
-        "README.md",
-        "THIRD_PARTY_LICENSES.txt"
-      ],
-      engines: {
-        node: ">=20"
-      },
-      publishConfig: {
-        access: "public"
-      },
-      repository: {
-        type: "git",
-        url: "git+https://github.com/FinchipAI/Finch-Site.git",
-        directory: "apps/cli"
-      },
-      homepage: "https://www.finchtech.ai",
-      scripts: {
-        build: 'esbuild src/bootstrap.ts --bundle --platform=node --format=esm --target=node20 --outfile=dist/finch.js --banner:js="#!/usr/bin/env node"',
-        check: "pnpm lint && pnpm typecheck && pnpm test && pnpm build",
-        lint: "eslint src vitest.config.ts eslint.config.mjs",
-        prepack: "pnpm build",
-        test: "vitest run",
-        typecheck: "tsc --noEmit"
-      },
-      devDependencies: {
-        "@finch/agent-market-contracts": "workspace:*",
-        "@finch/deployment-manifest": "workspace:*",
-        "@finch/skill-content": "workspace:*",
-        "@finch/skill-market-contracts": "workspace:*",
-        "@finch/task-market-contracts": "workspace:*",
-        "@eslint/js": "9.39.2",
-        "@types/node": "20.19.30",
-        ajv: "8.20.0",
-        esbuild: "0.28.2",
-        eslint: "9.39.2",
-        typescript: "5.9.3",
-        "typescript-eslint": "8.67.0",
-        viem: "2.55.15",
-        vitest: "4.1.10"
-      }
-    };
-  }
-});
-
 // src/command-router.ts
-function helpTopic(arguments_) {
+function finchOwnArguments(arguments_) {
+  const separator = arguments_.indexOf("--");
+  return separator < 0 ? arguments_ : arguments_.slice(0, separator);
+}
+function helpTopic(allArguments) {
+  const arguments_ = finchOwnArguments(allArguments);
   if (arguments_[0] === "help" && arguments_.length > 1) return arguments_.slice(1).join(" ");
   if (arguments_.length > 1 && arguments_.at(-1) === "--help" && arguments_.filter((argument) => argument === "--help").length === 1) {
     return arguments_.slice(0, -1).join(" ");
@@ -58482,7 +59013,13 @@ async function routeCommand(arguments_, application) {
   if (first === "mcp" && second === "doctor" && arguments_.length === 2) {
     return result("mcp.doctor", await method(application.doctorMcp, "mcp doctor").call(application));
   }
-  if (first === "mcp" && second === "authorize" && arguments_.length === 3 && third !== void 0) {
+  if (first === "mcp" && second === "connect" && third === "--" && arguments_.length > 3) {
+    return result("mcp.connect", await method(application.connectMcp, "mcp connect").call(application, Object.freeze(arguments_.slice(3))));
+  }
+  if (first === "mcp" && second === "authorize" && arguments_.length === 3 && third === "--stdin") {
+    return result("mcp.authorize", await method(application.authorizeMcpFromStdin, "mcp authorize").call(application));
+  }
+  if (first === "mcp" && second === "authorize" && arguments_.length === 3 && third !== void 0 && !third.startsWith("--")) {
     return result("mcp.authorize", await method(application.authorizeMcp, "mcp authorize").call(application, third));
   }
   if (first === "mcp" && second === "grant" && third === "create") {
@@ -58805,6 +59342,7 @@ var init_command_router = __esm({
       "site open",
       "site login",
       "mcp doctor",
+      "mcp connect",
       "mcp authorize",
       "mcp grant create",
       "mcp grant show",
@@ -58871,7 +59409,8 @@ var init_command_router = __esm({
       "site open": "finch site open",
       "site login": "finch site login <REQUEST_URL>",
       "mcp doctor": "finch mcp doctor",
-      "mcp authorize": "finch mcp authorize <REQUEST_TOKEN>",
+      "mcp connect": "finch mcp connect -- <MCP_CLIENT_LOGIN_COMMAND...>",
+      "mcp authorize": "finch mcp authorize --stdin | finch mcp authorize <REQUEST_TOKEN>",
       "mcp grant create": "finch mcp grant create --scopes <CSV> --expires-at <ISO-8601>",
       "mcp grant show": "finch mcp grant show <GRANT_ID>",
       "mcp grant revoke": "finch mcp grant revoke <GRANT_ID>",
@@ -58927,6 +59466,735 @@ var init_command_router = __esm({
   }
 });
 
+// ../../node_modules/.pnpm/isexe@2.0.0/node_modules/isexe/windows.js
+var require_windows = __commonJS({
+  "../../node_modules/.pnpm/isexe@2.0.0/node_modules/isexe/windows.js"(exports, module) {
+    module.exports = isexe;
+    isexe.sync = sync;
+    var fs = __require("fs");
+    function checkPathExt(path2, options) {
+      var pathext = options.pathExt !== void 0 ? options.pathExt : process.env.PATHEXT;
+      if (!pathext) {
+        return true;
+      }
+      pathext = pathext.split(";");
+      if (pathext.indexOf("") !== -1) {
+        return true;
+      }
+      for (var i2 = 0; i2 < pathext.length; i2++) {
+        var p = pathext[i2].toLowerCase();
+        if (p && path2.substr(-p.length).toLowerCase() === p) {
+          return true;
+        }
+      }
+      return false;
+    }
+    function checkStat(stat, path2, options) {
+      if (!stat.isSymbolicLink() && !stat.isFile()) {
+        return false;
+      }
+      return checkPathExt(path2, options);
+    }
+    function isexe(path2, options, cb) {
+      fs.stat(path2, function(er, stat) {
+        cb(er, er ? false : checkStat(stat, path2, options));
+      });
+    }
+    function sync(path2, options) {
+      return checkStat(fs.statSync(path2), path2, options);
+    }
+  }
+});
+
+// ../../node_modules/.pnpm/isexe@2.0.0/node_modules/isexe/mode.js
+var require_mode = __commonJS({
+  "../../node_modules/.pnpm/isexe@2.0.0/node_modules/isexe/mode.js"(exports, module) {
+    module.exports = isexe;
+    isexe.sync = sync;
+    var fs = __require("fs");
+    function isexe(path2, options, cb) {
+      fs.stat(path2, function(er, stat) {
+        cb(er, er ? false : checkStat(stat, options));
+      });
+    }
+    function sync(path2, options) {
+      return checkStat(fs.statSync(path2), options);
+    }
+    function checkStat(stat, options) {
+      return stat.isFile() && checkMode(stat, options);
+    }
+    function checkMode(stat, options) {
+      var mod2 = stat.mode;
+      var uid2 = stat.uid;
+      var gid = stat.gid;
+      var myUid = options.uid !== void 0 ? options.uid : process.getuid && process.getuid();
+      var myGid = options.gid !== void 0 ? options.gid : process.getgid && process.getgid();
+      var u = parseInt("100", 8);
+      var g = parseInt("010", 8);
+      var o = parseInt("001", 8);
+      var ug = u | g;
+      var ret = mod2 & o || mod2 & g && gid === myGid || mod2 & u && uid2 === myUid || mod2 & ug && myUid === 0;
+      return ret;
+    }
+  }
+});
+
+// ../../node_modules/.pnpm/isexe@2.0.0/node_modules/isexe/index.js
+var require_isexe = __commonJS({
+  "../../node_modules/.pnpm/isexe@2.0.0/node_modules/isexe/index.js"(exports, module) {
+    var fs = __require("fs");
+    var core;
+    if (process.platform === "win32" || global.TESTING_WINDOWS) {
+      core = require_windows();
+    } else {
+      core = require_mode();
+    }
+    module.exports = isexe;
+    isexe.sync = sync;
+    function isexe(path2, options, cb) {
+      if (typeof options === "function") {
+        cb = options;
+        options = {};
+      }
+      if (!cb) {
+        if (typeof Promise !== "function") {
+          throw new TypeError("callback not provided");
+        }
+        return new Promise(function(resolve4, reject5) {
+          isexe(path2, options || {}, function(er, is2) {
+            if (er) {
+              reject5(er);
+            } else {
+              resolve4(is2);
+            }
+          });
+        });
+      }
+      core(path2, options || {}, function(er, is2) {
+        if (er) {
+          if (er.code === "EACCES" || options && options.ignoreErrors) {
+            er = null;
+            is2 = false;
+          }
+        }
+        cb(er, is2);
+      });
+    }
+    function sync(path2, options) {
+      try {
+        return core.sync(path2, options || {});
+      } catch (er) {
+        if (options && options.ignoreErrors || er.code === "EACCES") {
+          return false;
+        } else {
+          throw er;
+        }
+      }
+    }
+  }
+});
+
+// ../../node_modules/.pnpm/which@2.0.2/node_modules/which/which.js
+var require_which = __commonJS({
+  "../../node_modules/.pnpm/which@2.0.2/node_modules/which/which.js"(exports, module) {
+    var isWindows = process.platform === "win32" || process.env.OSTYPE === "cygwin" || process.env.OSTYPE === "msys";
+    var path2 = __require("path");
+    var COLON = isWindows ? ";" : ":";
+    var isexe = require_isexe();
+    var getNotFoundError = (cmd) => Object.assign(new Error(`not found: ${cmd}`), { code: "ENOENT" });
+    var getPathInfo = (cmd, opt) => {
+      const colon = opt.colon || COLON;
+      const pathEnv = cmd.match(/\//) || isWindows && cmd.match(/\\/) ? [""] : [
+        // windows always checks the cwd first
+        ...isWindows ? [process.cwd()] : [],
+        ...(opt.path || process.env.PATH || /* istanbul ignore next: very unusual */
+        "").split(colon)
+      ];
+      const pathExtExe = isWindows ? opt.pathExt || process.env.PATHEXT || ".EXE;.CMD;.BAT;.COM" : "";
+      const pathExt = isWindows ? pathExtExe.split(colon) : [""];
+      if (isWindows) {
+        if (cmd.indexOf(".") !== -1 && pathExt[0] !== "")
+          pathExt.unshift("");
+      }
+      return {
+        pathEnv,
+        pathExt,
+        pathExtExe
+      };
+    };
+    var which = (cmd, opt, cb) => {
+      if (typeof opt === "function") {
+        cb = opt;
+        opt = {};
+      }
+      if (!opt)
+        opt = {};
+      const { pathEnv, pathExt, pathExtExe } = getPathInfo(cmd, opt);
+      const found = [];
+      const step = (i2) => new Promise((resolve4, reject5) => {
+        if (i2 === pathEnv.length)
+          return opt.all && found.length ? resolve4(found) : reject5(getNotFoundError(cmd));
+        const ppRaw = pathEnv[i2];
+        const pathPart = /^".*"$/.test(ppRaw) ? ppRaw.slice(1, -1) : ppRaw;
+        const pCmd = path2.join(pathPart, cmd);
+        const p = !pathPart && /^\.[\\\/]/.test(cmd) ? cmd.slice(0, 2) + pCmd : pCmd;
+        resolve4(subStep(p, i2, 0));
+      });
+      const subStep = (p, i2, ii) => new Promise((resolve4, reject5) => {
+        if (ii === pathExt.length)
+          return resolve4(step(i2 + 1));
+        const ext = pathExt[ii];
+        isexe(p + ext, { pathExt: pathExtExe }, (er, is2) => {
+          if (!er && is2) {
+            if (opt.all)
+              found.push(p + ext);
+            else
+              return resolve4(p + ext);
+          }
+          return resolve4(subStep(p, i2, ii + 1));
+        });
+      });
+      return cb ? step(0).then((res) => cb(null, res), cb) : step(0);
+    };
+    var whichSync = (cmd, opt) => {
+      opt = opt || {};
+      const { pathEnv, pathExt, pathExtExe } = getPathInfo(cmd, opt);
+      const found = [];
+      for (let i2 = 0; i2 < pathEnv.length; i2++) {
+        const ppRaw = pathEnv[i2];
+        const pathPart = /^".*"$/.test(ppRaw) ? ppRaw.slice(1, -1) : ppRaw;
+        const pCmd = path2.join(pathPart, cmd);
+        const p = !pathPart && /^\.[\\\/]/.test(cmd) ? cmd.slice(0, 2) + pCmd : pCmd;
+        for (let j = 0; j < pathExt.length; j++) {
+          const cur = p + pathExt[j];
+          try {
+            const is2 = isexe.sync(cur, { pathExt: pathExtExe });
+            if (is2) {
+              if (opt.all)
+                found.push(cur);
+              else
+                return cur;
+            }
+          } catch (ex) {
+          }
+        }
+      }
+      if (opt.all && found.length)
+        return found;
+      if (opt.nothrow)
+        return null;
+      throw getNotFoundError(cmd);
+    };
+    module.exports = which;
+    which.sync = whichSync;
+  }
+});
+
+// ../../node_modules/.pnpm/path-key@3.1.1/node_modules/path-key/index.js
+var require_path_key = __commonJS({
+  "../../node_modules/.pnpm/path-key@3.1.1/node_modules/path-key/index.js"(exports, module) {
+    "use strict";
+    var pathKey = (options = {}) => {
+      const environment3 = options.env || process.env;
+      const platform = options.platform || process.platform;
+      if (platform !== "win32") {
+        return "PATH";
+      }
+      return Object.keys(environment3).reverse().find((key) => key.toUpperCase() === "PATH") || "Path";
+    };
+    module.exports = pathKey;
+    module.exports.default = pathKey;
+  }
+});
+
+// ../../node_modules/.pnpm/cross-spawn@7.0.6/node_modules/cross-spawn/lib/util/resolveCommand.js
+var require_resolveCommand = __commonJS({
+  "../../node_modules/.pnpm/cross-spawn@7.0.6/node_modules/cross-spawn/lib/util/resolveCommand.js"(exports, module) {
+    "use strict";
+    var path2 = __require("path");
+    var which = require_which();
+    var getPathKey = require_path_key();
+    function resolveCommandAttempt(parsed2, withoutPathExt) {
+      const env = parsed2.options.env || process.env;
+      const cwd = process.cwd();
+      const hasCustomCwd = parsed2.options.cwd != null;
+      const shouldSwitchCwd = hasCustomCwd && process.chdir !== void 0 && !process.chdir.disabled;
+      if (shouldSwitchCwd) {
+        try {
+          process.chdir(parsed2.options.cwd);
+        } catch (err2) {
+        }
+      }
+      let resolved;
+      try {
+        resolved = which.sync(parsed2.command, {
+          path: env[getPathKey({ env })],
+          pathExt: withoutPathExt ? path2.delimiter : void 0
+        });
+      } catch (e) {
+      } finally {
+        if (shouldSwitchCwd) {
+          process.chdir(cwd);
+        }
+      }
+      if (resolved) {
+        resolved = path2.resolve(hasCustomCwd ? parsed2.options.cwd : "", resolved);
+      }
+      return resolved;
+    }
+    function resolveCommand(parsed2) {
+      return resolveCommandAttempt(parsed2) || resolveCommandAttempt(parsed2, true);
+    }
+    module.exports = resolveCommand;
+  }
+});
+
+// ../../node_modules/.pnpm/cross-spawn@7.0.6/node_modules/cross-spawn/lib/util/escape.js
+var require_escape = __commonJS({
+  "../../node_modules/.pnpm/cross-spawn@7.0.6/node_modules/cross-spawn/lib/util/escape.js"(exports, module) {
+    "use strict";
+    var metaCharsRegExp = /([()\][%!^"`<>&|;, *?])/g;
+    function escapeCommand(arg) {
+      arg = arg.replace(metaCharsRegExp, "^$1");
+      return arg;
+    }
+    function escapeArgument(arg, doubleEscapeMetaChars) {
+      arg = `${arg}`;
+      arg = arg.replace(/(?=(\\+?)?)\1"/g, '$1$1\\"');
+      arg = arg.replace(/(?=(\\+?)?)\1$/, "$1$1");
+      arg = `"${arg}"`;
+      arg = arg.replace(metaCharsRegExp, "^$1");
+      if (doubleEscapeMetaChars) {
+        arg = arg.replace(metaCharsRegExp, "^$1");
+      }
+      return arg;
+    }
+    module.exports.command = escapeCommand;
+    module.exports.argument = escapeArgument;
+  }
+});
+
+// ../../node_modules/.pnpm/shebang-regex@3.0.0/node_modules/shebang-regex/index.js
+var require_shebang_regex = __commonJS({
+  "../../node_modules/.pnpm/shebang-regex@3.0.0/node_modules/shebang-regex/index.js"(exports, module) {
+    "use strict";
+    module.exports = /^#!(.*)/;
+  }
+});
+
+// ../../node_modules/.pnpm/shebang-command@2.0.0/node_modules/shebang-command/index.js
+var require_shebang_command = __commonJS({
+  "../../node_modules/.pnpm/shebang-command@2.0.0/node_modules/shebang-command/index.js"(exports, module) {
+    "use strict";
+    var shebangRegex = require_shebang_regex();
+    module.exports = (string5 = "") => {
+      const match = string5.match(shebangRegex);
+      if (!match) {
+        return null;
+      }
+      const [path2, argument] = match[0].replace(/#! ?/, "").split(" ");
+      const binary = path2.split("/").pop();
+      if (binary === "env") {
+        return argument;
+      }
+      return argument ? `${binary} ${argument}` : binary;
+    };
+  }
+});
+
+// ../../node_modules/.pnpm/cross-spawn@7.0.6/node_modules/cross-spawn/lib/util/readShebang.js
+var require_readShebang = __commonJS({
+  "../../node_modules/.pnpm/cross-spawn@7.0.6/node_modules/cross-spawn/lib/util/readShebang.js"(exports, module) {
+    "use strict";
+    var fs = __require("fs");
+    var shebangCommand = require_shebang_command();
+    function readShebang(command) {
+      const size5 = 150;
+      const buffer3 = Buffer.alloc(size5);
+      let fd2;
+      try {
+        fd2 = fs.openSync(command, "r");
+        fs.readSync(fd2, buffer3, 0, size5, 0);
+        fs.closeSync(fd2);
+      } catch (e) {
+      }
+      return shebangCommand(buffer3.toString());
+    }
+    module.exports = readShebang;
+  }
+});
+
+// ../../node_modules/.pnpm/cross-spawn@7.0.6/node_modules/cross-spawn/lib/parse.js
+var require_parse = __commonJS({
+  "../../node_modules/.pnpm/cross-spawn@7.0.6/node_modules/cross-spawn/lib/parse.js"(exports, module) {
+    "use strict";
+    var path2 = __require("path");
+    var resolveCommand = require_resolveCommand();
+    var escape2 = require_escape();
+    var readShebang = require_readShebang();
+    var isWin = process.platform === "win32";
+    var isExecutableRegExp = /\.(?:com|exe)$/i;
+    var isCmdShimRegExp = /node_modules[\\/].bin[\\/][^\\/]+\.cmd$/i;
+    function detectShebang(parsed2) {
+      parsed2.file = resolveCommand(parsed2);
+      const shebang = parsed2.file && readShebang(parsed2.file);
+      if (shebang) {
+        parsed2.args.unshift(parsed2.file);
+        parsed2.command = shebang;
+        return resolveCommand(parsed2);
+      }
+      return parsed2.file;
+    }
+    function parseNonShell(parsed2) {
+      if (!isWin) {
+        return parsed2;
+      }
+      const commandFile = detectShebang(parsed2);
+      const needsShell = !isExecutableRegExp.test(commandFile);
+      if (parsed2.options.forceShell || needsShell) {
+        const needsDoubleEscapeMetaChars = isCmdShimRegExp.test(commandFile);
+        parsed2.command = path2.normalize(parsed2.command);
+        parsed2.command = escape2.command(parsed2.command);
+        parsed2.args = parsed2.args.map((arg) => escape2.argument(arg, needsDoubleEscapeMetaChars));
+        const shellCommand = [parsed2.command].concat(parsed2.args).join(" ");
+        parsed2.args = ["/d", "/s", "/c", `"${shellCommand}"`];
+        parsed2.command = process.env.comspec || "cmd.exe";
+        parsed2.options.windowsVerbatimArguments = true;
+      }
+      return parsed2;
+    }
+    function parse4(command, args, options) {
+      if (args && !Array.isArray(args)) {
+        options = args;
+        args = null;
+      }
+      args = args ? args.slice(0) : [];
+      options = Object.assign({}, options);
+      const parsed2 = {
+        command,
+        args,
+        options,
+        file: void 0,
+        original: {
+          command,
+          args
+        }
+      };
+      return options.shell ? parsed2 : parseNonShell(parsed2);
+    }
+    module.exports = parse4;
+  }
+});
+
+// ../../node_modules/.pnpm/cross-spawn@7.0.6/node_modules/cross-spawn/lib/enoent.js
+var require_enoent = __commonJS({
+  "../../node_modules/.pnpm/cross-spawn@7.0.6/node_modules/cross-spawn/lib/enoent.js"(exports, module) {
+    "use strict";
+    var isWin = process.platform === "win32";
+    function notFoundError(original, syscall) {
+      return Object.assign(new Error(`${syscall} ${original.command} ENOENT`), {
+        code: "ENOENT",
+        errno: "ENOENT",
+        syscall: `${syscall} ${original.command}`,
+        path: original.command,
+        spawnargs: original.args
+      });
+    }
+    function hookChildProcess(cp, parsed2) {
+      if (!isWin) {
+        return;
+      }
+      const originalEmit = cp.emit;
+      cp.emit = function(name, arg1) {
+        if (name === "exit") {
+          const err2 = verifyENOENT(arg1, parsed2);
+          if (err2) {
+            return originalEmit.call(cp, "error", err2);
+          }
+        }
+        return originalEmit.apply(cp, arguments);
+      };
+    }
+    function verifyENOENT(status, parsed2) {
+      if (isWin && status === 1 && !parsed2.file) {
+        return notFoundError(parsed2.original, "spawn");
+      }
+      return null;
+    }
+    function verifyENOENTSync(status, parsed2) {
+      if (isWin && status === 1 && !parsed2.file) {
+        return notFoundError(parsed2.original, "spawnSync");
+      }
+      return null;
+    }
+    module.exports = {
+      hookChildProcess,
+      verifyENOENT,
+      verifyENOENTSync,
+      notFoundError
+    };
+  }
+});
+
+// ../../node_modules/.pnpm/cross-spawn@7.0.6/node_modules/cross-spawn/index.js
+var require_cross_spawn = __commonJS({
+  "../../node_modules/.pnpm/cross-spawn@7.0.6/node_modules/cross-spawn/index.js"(exports, module) {
+    "use strict";
+    var cp = __require("child_process");
+    var parse4 = require_parse();
+    var enoent = require_enoent();
+    function spawn2(command, args, options) {
+      const parsed2 = parse4(command, args, options);
+      const spawned = cp.spawn(parsed2.command, parsed2.args, parsed2.options);
+      enoent.hookChildProcess(spawned, parsed2);
+      return spawned;
+    }
+    function spawnSync2(command, args, options) {
+      const parsed2 = parse4(command, args, options);
+      const result2 = cp.spawnSync(parsed2.command, parsed2.args, parsed2.options);
+      result2.error = result2.error || enoent.verifyENOENTSync(result2.status, parsed2);
+      return result2;
+    }
+    module.exports = spawn2;
+    module.exports.spawn = spawn2;
+    module.exports.sync = spawnSync2;
+    module.exports._parse = parse4;
+    module.exports._enoent = enoent;
+  }
+});
+
+// src/authorization-url-scanner.ts
+function escapeRegExp(value) {
+  return value.replace(/[.*+?^${}()|[\]\\]/gu, "\\$&");
+}
+var MAXIMUM_BUFFERED_LINE_CHARACTERS, URL_CHARACTERS, OSC8_HYPERLINK, ESCAPE_SEQUENCE, AuthorizationUrlScanner;
+var init_authorization_url_scanner = __esm({
+  "src/authorization-url-scanner.ts"() {
+    "use strict";
+    MAXIMUM_BUFFERED_LINE_CHARACTERS = 16384;
+    URL_CHARACTERS = '[^\\s"<>`{}|\\\\^]+';
+    OSC8_HYPERLINK = /\u001b\]8;[^;\u0007\u001b]*;([^\u0007\u001b]*)(?:\u0007|\u001b\\)/gu;
+    ESCAPE_SEQUENCE = /\u001b\][^\u0007\u001b]*(?:\u0007|\u001b\\)|\u001b\[[0-?]*[ -/]*[@-~]|\u001b[@-_]/gu;
+    AuthorizationUrlScanner = class {
+      pattern;
+      buffers = /* @__PURE__ */ new Map();
+      seen = /* @__PURE__ */ new Set();
+      constructor(origin2) {
+        this.pattern = new RegExp(`${escapeRegExp(`${origin2}/oauth/authorize?`)}${URL_CHARACTERS}`, "gu");
+      }
+      /**
+       * Adds one chunk of one stream. Returns the complete lines it closed, for forwarding, and every
+       * authorization URL those lines introduced that was not seen before on any stream.
+       */
+      feed(stream, chunk) {
+        const buffered = `${this.buffers.get(stream) ?? ""}${chunk}`;
+        const parts = buffered.split(/\r\n|\n|\r/u);
+        let remainder = parts.pop();
+        if (remainder.length > MAXIMUM_BUFFERED_LINE_CHARACTERS) {
+          parts.push(remainder);
+          remainder = "";
+        }
+        this.buffers.set(stream, remainder);
+        return this.scan(parts);
+      }
+      /** Closes one stream, treating any unterminated text as its final line. */
+      end(stream) {
+        const remainder = this.buffers.get(stream) ?? "";
+        this.buffers.delete(stream);
+        return this.scan(remainder === "" ? [] : [remainder]);
+      }
+      scan(lines) {
+        const urls = [];
+        for (const line of lines) {
+          const hyperlinkTargets = [...line.matchAll(OSC8_HYPERLINK)].map((match) => match[1]);
+          const visible = line.replace(ESCAPE_SEQUENCE, "");
+          for (const text3 of [...hyperlinkTargets, visible]) {
+            for (const match of text3.matchAll(this.pattern)) {
+              const url2 = match[0];
+              if (!this.seen.has(url2)) {
+                this.seen.add(url2);
+                urls.push(url2);
+              }
+            }
+          }
+        }
+        return Object.freeze({ lines: Object.freeze([...lines]), urls: Object.freeze(urls) });
+      }
+    };
+  }
+});
+
+// src/mcp-login-process.ts
+import { spawn as spawnSync } from "node:child_process";
+function terminate(child) {
+  if (child.exitCode !== null || child.signalCode !== null || child.pid === void 0) return;
+  if (process.platform === "win32") {
+    spawnSync("taskkill", ["/pid", String(child.pid), "/T", "/F"], { stdio: "ignore", windowsHide: true });
+  } else {
+    child.kill("SIGTERM");
+  }
+}
+var import_cross_spawn, AUTHORIZATION_URL_TIMEOUT_MILLISECONDS, LOGIN_EXIT_TIMEOUT_MILLISECONDS, spawnLoginCommand, InstalledMcpLoginSession, InstalledMcpLoginProcess;
+var init_mcp_login_process = __esm({
+  "src/mcp-login-process.ts"() {
+    "use strict";
+    import_cross_spawn = __toESM(require_cross_spawn(), 1);
+    init_authorization_url_scanner();
+    init_cli_error();
+    AUTHORIZATION_URL_TIMEOUT_MILLISECONDS = 12e4;
+    LOGIN_EXIT_TIMEOUT_MILLISECONDS = 6e4;
+    spawnLoginCommand = (command, arguments_) => (0, import_cross_spawn.default)(command, [...arguments_], {
+      // stdin stays an open pipe that is never written: clients that also accept a pasted callback
+      // treat end-of-input as a failed login.
+      stdio: ["pipe", "pipe", "pipe"],
+      windowsHide: true
+    });
+    InstalledMcpLoginSession = class {
+      constructor(child, origin2, diagnostics, timeouts) {
+        this.child = child;
+        this.diagnostics = diagnostics;
+        this.timeouts = timeouts;
+        this.scanner = new AuthorizationUrlScanner(origin2);
+        this.firstUrlPromise = new Promise((resolve4, reject5) => {
+          this.firstUrl = resolve4;
+          this.firstUrlFailed = reject5;
+        });
+        this.firstUrlPromise.catch(() => void 0);
+        for (const [name, stream] of [["stdout", child.stdout], ["stderr", child.stderr]]) {
+          stream?.setEncoding("utf8");
+          stream?.on("data", (chunk) => this.accept(this.scanner.feed(name, chunk)));
+          stream?.on("end", () => this.accept(this.scanner.end(name)));
+        }
+        this.exited = new Promise((resolve4) => {
+          child.once("error", (cause) => {
+            this.firstUrlFailed?.(new McpAuthorizationFlowError("login_command_not_started", {}, { cause }));
+            resolve4(-1);
+          });
+          child.once("close", (code) => resolve4(code ?? -1));
+        });
+        void this.exited.then((code) => this.firstUrlFailed?.(new McpAuthorizationFlowError(
+          "request_url_not_found",
+          { loginCommandExitCode: code }
+        )));
+      }
+      child;
+      diagnostics;
+      timeouts;
+      scanner;
+      secrets = [];
+      exited;
+      firstUrl;
+      firstUrlFailed;
+      firstUrlPromise;
+      authorizationUrlCount = 0;
+      accept(scan) {
+        for (const line of scan.lines) {
+          this.diagnostics(`${this.secrets.reduce((text3, secret) => text3.split(secret).join("[REDACTED]"), line)}
+`);
+        }
+        for (const url2 of scan.urls) {
+          this.authorizationUrlCount += 1;
+          if (this.authorizationUrlCount === 1) this.firstUrl?.(url2);
+        }
+      }
+      async authorizationUrl() {
+        let timer;
+        const timeout = new Promise((_resolve, reject5) => {
+          timer = setTimeout(
+            () => reject5(new McpAuthorizationFlowError("request_url_not_found")),
+            this.timeouts.authorizationUrl
+          );
+        });
+        try {
+          return await Promise.race([this.firstUrlPromise, timeout]);
+        } finally {
+          clearTimeout(timer);
+        }
+      }
+      redact(secret) {
+        if (secret.length > 0) this.secrets.push(secret);
+      }
+      async waitForExit() {
+        let timer;
+        const timeout = new Promise((resolve4) => {
+          timer = setTimeout(() => resolve4("timeout"), this.timeouts.exit);
+        });
+        try {
+          const code = await Promise.race([this.exited, timeout]);
+          if (this.authorizationUrlCount > 1) {
+            throw new McpAuthorizationFlowError("second_authorization_request");
+          }
+          if (code === "timeout") throw new McpAuthorizationFlowError("login_command_timeout");
+          if (code !== 0) throw new McpAuthorizationFlowError("login_command_failed", { loginCommandExitCode: code });
+          return code;
+        } finally {
+          clearTimeout(timer);
+        }
+      }
+      close() {
+        terminate(this.child);
+        this.child.stdin?.end();
+      }
+    };
+    InstalledMcpLoginProcess = class {
+      constructor(spawn2 = spawnLoginCommand, diagnostics = (text3) => {
+        process.stderr.write(text3);
+      }, timeouts = {
+        authorizationUrl: AUTHORIZATION_URL_TIMEOUT_MILLISECONDS,
+        exit: LOGIN_EXIT_TIMEOUT_MILLISECONDS
+      }) {
+        this.spawn = spawn2;
+        this.diagnostics = diagnostics;
+        this.timeouts = timeouts;
+      }
+      spawn;
+      diagnostics;
+      timeouts;
+      start(command, origin2) {
+        const [executable, ...arguments_] = command;
+        if (executable === void 0 || executable.length === 0) {
+          throw new TypeError("finch mcp connect requires an MCP client login command after --.");
+        }
+        return new InstalledMcpLoginSession(this.spawn(executable, arguments_), origin2, this.diagnostics, this.timeouts);
+      }
+    };
+  }
+});
+
+// src/stdin-reader.ts
+var ProcessStdinReader;
+var init_stdin_reader = __esm({
+  "src/stdin-reader.ts"() {
+    "use strict";
+    init_cli_error();
+    ProcessStdinReader = class {
+      constructor(input = process.stdin) {
+        this.input = input;
+      }
+      input;
+      async readAll(maximumBytes) {
+        if (this.input.isTTY === true) throw new McpAuthorizationFlowError("stdin_invalid");
+        const chunks = [];
+        let total = 0;
+        for await (const chunk of this.input) {
+          const bytes = Buffer.isBuffer(chunk) ? chunk : Buffer.from(String(chunk), "utf8");
+          total += bytes.byteLength;
+          if (total > maximumBytes) {
+            this.input.destroy();
+            throw new McpAuthorizationFlowError("stdin_invalid");
+          }
+          chunks.push(bytes);
+        }
+        try {
+          return new TextDecoder("utf-8", { fatal: true }).decode(Buffer.concat(chunks));
+        } catch (cause) {
+          throw new McpAuthorizationFlowError("stdin_invalid", {}, { cause });
+        }
+      }
+    };
+  }
+});
+
 // src/recovery-inventory.ts
 function object3(value, name) {
   if (typeof value !== "object" || value === null || Array.isArray(value)) {
@@ -60113,6 +61381,40 @@ var init_arbitrum = __esm({
   }
 });
 
+// ../../node_modules/.pnpm/viem@2.55.15_bufferutil@4.1_ce20031be19c56210207d462110a7a29/node_modules/viem/_esm/chains/definitions/avalanche.js
+var avalanche;
+var init_avalanche = __esm({
+  "../../node_modules/.pnpm/viem@2.55.15_bufferutil@4.1_ce20031be19c56210207d462110a7a29/node_modules/viem/_esm/chains/definitions/avalanche.js"() {
+    init_defineChain();
+    avalanche = /* @__PURE__ */ defineChain({
+      id: 43114,
+      name: "Avalanche",
+      blockTime: 1700,
+      nativeCurrency: {
+        decimals: 18,
+        name: "Avalanche",
+        symbol: "AVAX"
+      },
+      rpcUrls: {
+        default: { http: ["https://api.avax.network/ext/bc/C/rpc"] }
+      },
+      blockExplorers: {
+        default: {
+          name: "SnowTrace",
+          url: "https://snowtrace.io",
+          apiUrl: "https://api.snowtrace.io"
+        }
+      },
+      contracts: {
+        multicall3: {
+          address: "0xca11bde05977b3631167028862be2a173976ca11",
+          blockCreated: 11907934
+        }
+      }
+    });
+  }
+});
+
 // ../../node_modules/.pnpm/viem@2.55.15_bufferutil@4.1_ce20031be19c56210207d462110a7a29/node_modules/viem/_esm/chains/definitions/base.js
 var sourceId, base2, basePreconf;
 var init_base3 = __esm({
@@ -60283,6 +61585,37 @@ var init_bsc = __esm({
   }
 });
 
+// ../../node_modules/.pnpm/viem@2.55.15_bufferutil@4.1_ce20031be19c56210207d462110a7a29/node_modules/viem/_esm/chains/definitions/injective.js
+var injective;
+var init_injective = __esm({
+  "../../node_modules/.pnpm/viem@2.55.15_bufferutil@4.1_ce20031be19c56210207d462110a7a29/node_modules/viem/_esm/chains/definitions/injective.js"() {
+    init_defineChain();
+    injective = /* @__PURE__ */ defineChain({
+      id: 1776,
+      name: "Injective",
+      nativeCurrency: {
+        decimals: 18,
+        name: "Injective",
+        symbol: "INJ"
+      },
+      rpcUrls: {
+        default: {
+          http: ["https://sentry.evm-rpc.injective.network"],
+          webSocket: ["wss://sentry.evm-ws.injective.network"]
+        }
+      },
+      blockExplorers: {
+        default: {
+          name: "Injective Explorer",
+          url: "https://blockscout.injective.network",
+          apiUrl: "https://blockscout.injective.network/api"
+        }
+      },
+      testnet: false
+    });
+  }
+});
+
 // ../../node_modules/.pnpm/viem@2.55.15_bufferutil@4.1_ce20031be19c56210207d462110a7a29/node_modules/viem/_esm/chains/definitions/mainnet.js
 var mainnet;
 var init_mainnet = __esm({
@@ -60379,14 +61712,33 @@ var init_optimism = __esm({
 var init_chains2 = __esm({
   "../../node_modules/.pnpm/viem@2.55.15_bufferutil@4.1_ce20031be19c56210207d462110a7a29/node_modules/viem/_esm/chains/index.js"() {
     init_arbitrum();
+    init_avalanche();
     init_base3();
     init_baseSepolia();
     init_bsc();
+    init_injective();
     init_mainnet();
     init_optimism();
   }
 });
 
+// src/custody-chains.ts
+function custodyViemChain(chainId, purpose) {
+  const chain = CUSTODY_CHAINS.get(chainId);
+  if (!chain) throw new TypeError(`${purpose} custody has no reviewed viem chain for ${chainId}.`);
+  return chain;
+}
+var CUSTODY_CHAINS;
+var init_custody_chains = __esm({
+  "src/custody-chains.ts"() {
+    "use strict";
+    init_chains2();
+    CUSTODY_CHAINS = new Map(
+      [base2, injective, baseSepolia].map((chain) => [chain.id, chain])
+    );
+  }
+});
+
 // src/purchase-sender.ts
 function parseRpcUrl(value) {
   const parsed2 = new URL(value);
@@ -60430,20 +61782,18 @@ function assertCanonicalPlanTransactions(input) {
     }
   })();
   if (decoded.functionName !== "purchase") throw new TypeError("Agent purchase method is invalid.");
-  const request = decoded.args[0];
+  const request2 = decoded.args[0];
   const deadline = Date.parse(input.confirmationDeadlineAt);
-  if (!Number.isSafeInteger(deadline) || deadline <= Date.now() || request.purchaseId !== uuidBytes32(input.operationId) || request.payToken.toLowerCase() !== token || request.unitPrice * request.units !== amount || request.validUntil !== BigInt(Math.floor(deadline / 1e3))) {
+  if (!Number.isSafeInteger(deadline) || deadline <= Date.now() || request2.purchaseId !== uuidBytes32(input.operationId) || request2.payToken.toLowerCase() !== token || request2.unitPrice * request2.units !== amount || request2.validUntil !== BigInt(Math.floor(deadline / 1e3))) {
     throw new TypeError("Agent purchase arguments do not match the frozen plan.");
   }
-  const purchase = encodeFunctionData({ abi: agentPurchaseAbi, functionName: "purchase", args: [request] });
+  const purchase = encodeFunctionData({ abi: agentPurchaseAbi, functionName: "purchase", args: [request2] });
   if (input.approval.data !== approval || input.revokeApproval.data !== revoke || input.purchase.data !== purchase) {
     throw new TypeError("Agent purchase calldata is not canonical for the frozen plan.");
   }
 }
 function planChain(chainId) {
-  if (chainId === base2.id) return base2;
-  if (chainId === baseSepolia.id) return baseSepolia;
-  throw new TypeError(`Agent custody has no reviewed viem chain for ${chainId}.`);
+  return custodyViemChain(chainId, "Agent");
 }
 function viemRpcFactory(rpcUrl, chainId, confirmations) {
   const chain = planChain(chainId);
@@ -60563,7 +61913,7 @@ var init_purchase_sender = __esm({
     "use strict";
     init_esm2();
     init_accounts();
-    init_chains2();
+    init_custody_chains();
     erc20ApproveAbi = [{
       type: "function",
       name: "approve",
@@ -60731,9 +62081,7 @@ function uint16(value, name) {
   return Number(value);
 }
 function planChain2(chainId) {
-  if (chainId === base2.id) return base2;
-  if (chainId === baseSepolia.id) return baseSepolia;
-  throw new TypeError(`Task custody has no reviewed viem chain for ${chainId}.`);
+  return custodyViemChain(chainId, "Task");
 }
 function viemFactory(rpcUrl, chainId, confirmations) {
   const chain = planChain2(chainId);
@@ -60871,7 +62219,7 @@ var init_task_protocol_sender = __esm({
     "use strict";
     init_esm2();
     init_accounts();
-    init_chains2();
+    init_custody_chains();
     init_chains();
     erc20Abi2 = parseAbi([
       "function allowance(address owner, address spender) view returns (uint256)",
@@ -60925,12 +62273,12 @@ var init_task_protocol_sender = __esm({
         const preparation = record5(input.preparation, "Task pool preparation");
         assertSigningAuthority2(preparation, input.walletAddress, input.accountId);
         const deployment = taskDeployment(preparation.chainId);
-        const { vault, token, amount, request } = poolAuthority(preparation, input.taskId, deployment);
+        const { vault, token, amount, request: request2 } = poolAuthority(preparation, input.taskId, deployment);
         const rpc = await this.rpc(input.privateKey, input.walletAddress, deployment);
         const owner = canonicalAddress(input.walletAddress, "Task wallet");
         const credit = await rpc.readCreditBalance(vault, owner, token);
         if (credit >= amount) {
-          const data = encodeFunctionData({ abi: taskVaultAbi, functionName: "createPool", args: [request] });
+          const data = encodeFunctionData({ abi: taskVaultAbi, functionName: "createPool", args: [request2] });
           await rpc.simulateTransaction({ to: vault, data, value: 0n });
           const hash5 = await rpc.sendTransaction({ to: vault, data, value: 0n });
           await input.onBroadcast?.({ transactionHash: hash5 });
@@ -60944,7 +62292,7 @@ var init_task_protocol_sender = __esm({
         const createPool = encodeFunctionData({
           abi: taskVaultAbi,
           functionName: "depositAndCreatePool",
-          args: [request, depositAmount]
+          args: [request2, depositAmount]
         });
         const allowance = await rpc.readAllowance(token, owner, vault);
         if (allowance < depositAmount) {
@@ -61105,18 +62453,18 @@ function textValue(value, name, allowEmpty = false) {
   return value;
 }
 function resolveSkillViemChain(chainId) {
-  const chain = [mainnet, optimism, bsc, base2, arbitrum, baseSepolia].find((candidate) => candidate.id === chainId);
+  const chain = [mainnet, optimism, bsc, base2, arbitrum, avalanche, baseSepolia].find((candidate) => candidate.id === chainId);
   if (chain !== void 0) return chain;
   throw new TypeError(`Unsupported Skill chain ${String(chainId)}.`);
 }
-function expectedCall(kind, request, deployment) {
-  const skillId = () => unsigned2(request.skillId, "Skill id", true);
+function expectedCall(kind, request2, deployment) {
+  const skillId = () => unsigned2(request2.skillId, "Skill id", true);
   if (kind === "purchase") {
-    const quantity = unsigned2(request.quantity, "Skill quantity", true);
-    const unitPrice = unsigned2(request.unitPrice, "Skill unit price");
+    const quantity = unsigned2(request2.quantity, "Skill quantity", true);
+    const unitPrice = unsigned2(request2.unitPrice, "Skill unit price");
     return {
       to: getAddress(deployment.skillInstanceAddress),
-      data: encodeFunctionData({ abi: instanceAbi, functionName: "purchase", args: [skillId(), version5(request.version, "Skill version"), quantity] }),
+      data: encodeFunctionData({ abi: instanceAbi, functionName: "purchase", args: [skillId(), version5(request2.version, "Skill version"), quantity] }),
       value: unitPrice * quantity
     };
   }
@@ -61124,43 +62472,43 @@ function expectedCall(kind, request, deployment) {
     to: getAddress(deployment.skillInstanceAddress),
     data: encodeFunctionData({ abi: instanceAbi, functionName: "convert", args: [
       skillId(),
-      version5(request.fromVersion, "Source version"),
-      version5(request.toVersion, "Target version"),
-      unsigned2(request.quantity, "Skill quantity", true)
+      version5(request2.fromVersion, "Source version"),
+      version5(request2.toVersion, "Target version"),
+      unsigned2(request2.quantity, "Skill quantity", true)
     ] }),
     value: 0n
   };
   throw new TypeError("Skill intent kind is invalid.");
 }
-function expectedPreparedCall(action, request, deployment) {
-  const skillId = () => unsigned2(request.skillId, "Skill id", true);
+function expectedPreparedCall(action, request2, deployment) {
+  const skillId = () => unsigned2(request2.skillId, "Skill id", true);
   if (action === "createSkill") {
-    if (typeof request.plaintext !== "boolean" || !Number.isInteger(request.royaltyBPS) || Number(request.royaltyBPS) < 0 || Number(request.royaltyBPS) > 1e3) throw new TypeError("Skill create request is invalid.");
+    if (typeof request2.plaintext !== "boolean" || !Number.isInteger(request2.royaltyBPS) || Number(request2.royaltyBPS) < 0 || Number(request2.royaltyBPS) > 1e3) throw new TypeError("Skill create request is invalid.");
     return {
       to: getAddress(deployment.skillFactoryAddress),
       value: 0n,
       data: encodeFunctionData({ abi: factoryAbi, functionName: "createSkill", args: [{
-        mdHash: hash4(request.mdHash, "Skill primary-document hash"),
-        packageHash: hash4(request.packageHash, "Skill package hash"),
-        packageURI: textValue(request.packageURI, "Skill package URI"),
-        slug: textValue(request.slug, "Skill slug"),
-        name: textValue(request.name, "Skill name"),
-        category: textValue(request.category, "Skill category", true),
-        licenseTypeName: textValue(request.licenseTypeName, "Skill license", true),
-        imageURI: textValue(request.imageURI, "Skill image URI", true),
-        plaintext: request.plaintext,
-        unitPrice: unsigned2(request.unitPrice, "Skill unit price"),
-        maxSupply: unsigned2(request.maxSupply, "Skill max supply"),
-        royaltyBPS: BigInt(Number(request.royaltyBPS)),
-        usageLimit: unsigned2(request.usageLimit, "Skill usage limit")
+        mdHash: hash4(request2.mdHash, "Skill primary-document hash"),
+        packageHash: hash4(request2.packageHash, "Skill package hash"),
+        packageURI: textValue(request2.packageURI, "Skill package URI"),
+        slug: textValue(request2.slug, "Skill slug"),
+        name: textValue(request2.name, "Skill name"),
+        category: textValue(request2.category, "Skill category", true),
+        licenseTypeName: textValue(request2.licenseTypeName, "Skill license", true),
+        imageURI: textValue(request2.imageURI, "Skill image URI", true),
+        plaintext: request2.plaintext,
+        unitPrice: unsigned2(request2.unitPrice, "Skill unit price"),
+        maxSupply: unsigned2(request2.maxSupply, "Skill max supply"),
+        royaltyBPS: BigInt(Number(request2.royaltyBPS)),
+        usageLimit: unsigned2(request2.usageLimit, "Skill usage limit")
       }] })
     };
   }
-  if (action === "updateSkill") return { to: getAddress(deployment.skillTokenAddress), value: 0n, data: encodeFunctionData({ abi: tokenAbi, functionName: "updateSkill", args: [skillId(), hash4(request.mdHash, "Skill primary-document hash"), hash4(request.packageHash, "Skill package hash")] }) };
-  if (action === "setSkillURI") return { to: getAddress(deployment.skillTokenAddress), value: 0n, data: encodeFunctionData({ abi: tokenAbi, functionName: "setSkillURI", args: [skillId(), textValue(request.packageURI, "Skill package URI")] }) };
-  if (action === "setUnitPrice") return { to: getAddress(deployment.revenueRightAddress), value: 0n, data: encodeFunctionData({ abi: revenueAbi, functionName: "setUnitPrice", args: [skillId(), unsigned2(request.unitPrice, "Skill unit price")] }) };
-  if (action === "setMaxSupply") return { to: getAddress(deployment.revenueRightAddress), value: 0n, data: encodeFunctionData({ abi: revenueAbi, functionName: "setMaxSupply", args: [skillId(), unsigned2(request.maxSupply, "Skill max supply")] }) };
-  if (action === "setLitData") return { to: getAddress(deployment.skillInstanceAddress), value: 0n, data: encodeFunctionData({ abi: instanceAbi, functionName: "setLitData", args: [skillId(), version5(request.version, "Skill version"), textValue(request.ciphertext, "Skill ciphertext"), textValue(request.scheme, "Skill envelope scheme"), textValue(request.chain, "Skill chain tag")] }) };
+  if (action === "updateSkill") return { to: getAddress(deployment.skillTokenAddress), value: 0n, data: encodeFunctionData({ abi: tokenAbi, functionName: "updateSkill", args: [skillId(), hash4(request2.mdHash, "Skill primary-document hash"), hash4(request2.packageHash, "Skill package hash")] }) };
+  if (action === "setSkillURI") return { to: getAddress(deployment.skillTokenAddress), value: 0n, data: encodeFunctionData({ abi: tokenAbi, functionName: "setSkillURI", args: [skillId(), textValue(request2.packageURI, "Skill package URI")] }) };
+  if (action === "setUnitPrice") return { to: getAddress(deployment.revenueRightAddress), value: 0n, data: encodeFunctionData({ abi: revenueAbi, functionName: "setUnitPrice", args: [skillId(), unsigned2(request2.unitPrice, "Skill unit price")] }) };
+  if (action === "setMaxSupply") return { to: getAddress(deployment.revenueRightAddress), value: 0n, data: encodeFunctionData({ abi: revenueAbi, functionName: "setMaxSupply", args: [skillId(), unsigned2(request2.maxSupply, "Skill max supply")] }) };
+  if (action === "setLitData") return { to: getAddress(deployment.skillInstanceAddress), value: 0n, data: encodeFunctionData({ abi: instanceAbi, functionName: "setLitData", args: [skillId(), version5(request2.version, "Skill version"), textValue(request2.ciphertext, "Skill ciphertext"), textValue(request2.scheme, "Skill envelope scheme"), textValue(request2.chain, "Skill chain tag")] }) };
   throw new TypeError("Skill prepared action is invalid.");
 }
 function assertIntentMatches(raw, expected, chainId) {
@@ -61271,9 +62619,9 @@ var init_skill_intent_sender = __esm({
         if (typeof input.intent.walletAddress !== "string" || input.intent.walletAddress.toLowerCase() !== input.walletAddress.toLowerCase()) {
           throw new TypeError("Skill intent wallet does not match the active CLI wallet.");
         }
-        const request = record6(input.intent.request, "Skill intent request");
-        if (request.chainId !== deployment.chainId) throw new TypeError("Skill intent request chain is invalid.");
-        const expected = expectedCall(input.expectedKind, request, deployment);
+        const request2 = record6(input.intent.request, "Skill intent request");
+        if (request2.chainId !== deployment.chainId) throw new TypeError("Skill intent request chain is invalid.");
+        const expected = expectedCall(input.expectedKind, request2, deployment);
         assertIntentMatches(
           input.intent,
           expected,
@@ -61312,10 +62660,10 @@ var init_skill_intent_sender = __esm({
         return Object.freeze({ transactionHash: transactionHash3, blockNumber: actual.blockNumber.toString() });
       }
       async submitPrepared(input) {
-        const request = record6(input.request, "Skill prepared request");
-        const deployment = this.authority(request.chainId);
+        const request2 = record6(input.request, "Skill prepared request");
+        const deployment = this.authority(request2.chainId);
         if (input.intent.chainId !== deployment.chainId) throw new TypeError("Skill prepared intent chain is invalid.");
-        const expected = expectedPreparedCall(input.action, request, deployment);
+        const expected = expectedPreparedCall(input.action, request2, deployment);
         assertIntentMatches(input.intent, expected, deployment.chainId);
         const rpc = await this.rpc(input.privateKey, input.walletAddress, deployment);
         await rpc.simulateTransaction(expected);
@@ -61326,9 +62674,9 @@ var init_skill_intent_sender = __esm({
         return Object.freeze({ transactionHash: transactionHash3, blockNumber: receipt.blockNumber.toString() });
       }
       async verifyPrepared(input) {
-        const request = record6(input.request, "Skill prepared request");
-        const deployment = this.authority(request.chainId);
-        const expected = expectedPreparedCall(input.action, request, deployment);
+        const request2 = record6(input.request, "Skill prepared request");
+        const deployment = this.authority(request2.chainId);
+        const expected = expectedPreparedCall(input.action, request2, deployment);
         const rpc = await this.rpc(input.privateKey, input.walletAddress, deployment);
         const transactionHash3 = hash4(input.transactionHash, "Skill recovery transaction hash");
         const exactTransaction2 = (actual2) => actual2.from.toLowerCase() === input.walletAddress && actual2.to?.toLowerCase() === expected.to.toLowerCase() && actual2.data === expected.data && actual2.value === expected.value;
@@ -61490,26 +62838,26 @@ function publishPlan(value, context) {
   exact2(plan, ["kind", "sourceCommit", "chainId", "walletAddress", "signingAuthority", "request", "localAction"], "Skill publish plan");
   const chainId = assertAuthority(plan, "publish", context.walletAddress);
   assertLocalAction(plan.localAction, "skill publish-submit");
-  const request = object5(plan.request, "Skill publish request");
-  exact2(request, ["chainId", "slug", "name", "category", "licenseTypeName", "imageURI", "sourceKind", "contentMode", "unitPrice", "maxSupply", "royaltyBPS", "usageLimit", ...Object.hasOwn(request, "summary") ? ["summary"] : []], "Skill publish request");
-  if (request.chainId !== chainId) throw new TypeError("Skill publish request chain is invalid.");
-  string4(request.slug, "Skill slug");
-  string4(request.name, "Skill name");
-  string4(request.category, "Skill category");
-  string4(request.licenseTypeName, "Skill license");
-  if (typeof request.imageURI !== "string") {
+  const request2 = object5(plan.request, "Skill publish request");
+  exact2(request2, ["chainId", "slug", "name", "category", "licenseTypeName", "imageURI", "sourceKind", "contentMode", "unitPrice", "maxSupply", "royaltyBPS", "usageLimit", ...Object.hasOwn(request2, "summary") ? ["summary"] : []], "Skill publish request");
+  if (request2.chainId !== chainId) throw new TypeError("Skill publish request chain is invalid.");
+  string4(request2.slug, "Skill slug");
+  string4(request2.name, "Skill name");
+  string4(request2.category, "Skill category");
+  string4(request2.licenseTypeName, "Skill license");
+  if (typeof request2.imageURI !== "string") {
     throw new TypeError("Skill publish metadata is invalid.");
   }
-  if (Object.hasOwn(request, "summary") && (typeof request.summary !== "string" || request.summary.length > 500)) throw new TypeError("Skill summary is invalid.");
-  sourceKind(request.sourceKind);
-  contentMode(request.contentMode);
-  string4(request.unitPrice, "Skill unitPrice", DECIMAL);
-  string4(request.maxSupply, "Skill maxSupply", DECIMAL);
-  string4(request.usageLimit, "Skill usageLimit", DECIMAL);
-  if (!Number.isInteger(request.royaltyBPS) || Number(request.royaltyBPS) < 0 || Number(request.royaltyBPS) > 1e3) throw new TypeError("Skill royaltyBPS is invalid.");
+  if (Object.hasOwn(request2, "summary") && (typeof request2.summary !== "string" || request2.summary.length > 500)) throw new TypeError("Skill summary is invalid.");
+  sourceKind(request2.sourceKind);
+  contentMode(request2.contentMode);
+  string4(request2.unitPrice, "Skill unitPrice", DECIMAL);
+  string4(request2.maxSupply, "Skill maxSupply", DECIMAL);
+  string4(request2.usageLimit, "Skill usageLimit", DECIMAL);
+  if (!Number.isInteger(request2.royaltyBPS) || Number(request2.royaltyBPS) < 0 || Number(request2.royaltyBPS) > 1e3) throw new TypeError("Skill royaltyBPS is invalid.");
   return {
     chainId,
-    request,
+    request: request2,
     signingAuthority: assertPublicationAuthority(signingAuthority(plan.signingAuthority, context.walletAddress), context)
   };
 }
@@ -61519,18 +62867,18 @@ function versionPlan(value, context) {
   const chainId = assertAuthority(plan, "version", context.walletAddress);
   const skillId = string4(plan.skillId, "Skill id", /^[1-9][0-9]*$/u);
   assertLocalAction(plan.localAction, "skill version-submit", skillId);
-  const request = { chainId, skillId, sourceKind: sourceKind(plan.sourceKind), contentMode: contentMode(plan.contentMode) };
+  const request2 = { chainId, skillId, sourceKind: sourceKind(plan.sourceKind), contentMode: contentMode(plan.contentMode) };
   const currentVersion = integer2(plan.currentVersion, "Current version");
   const nextVersion = integer2(plan.nextVersion, "Next version");
   if (nextVersion !== currentVersion + 1) throw new TypeError("Skill version plan does not advance exactly one version.");
   return {
     chainId,
-    request,
+    request: request2,
     currentVersion,
     nextVersion,
     currentPackageURI: string4(plan.currentManifestURI, "Current manifest URI", IPFS),
-    sourceKind: request.sourceKind,
-    contentMode: request.contentMode,
+    sourceKind: request2.sourceKind,
+    contentMode: request2.contentMode,
     signingAuthority: assertPublicationAuthority(signingAuthority(plan.signingAuthority, context.walletAddress), context)
   };
 }
@@ -61538,13 +62886,13 @@ function managePlan(value, walletAddress2, kind) {
   const plan = object5(value, `Skill ${kind} plan`);
   exact2(plan, ["kind", "sourceCommit", "chainId", "to", "data", "value", "summary", "walletAddress", "signingAuthority", "request"], `Skill ${kind} plan`);
   const chainId = assertAuthority(plan, kind === "price" ? "set_unit_price" : "set_max_supply", walletAddress2);
-  const request = object5(plan.request, `Skill ${kind} request`);
+  const request2 = object5(plan.request, `Skill ${kind} request`);
   const field = kind === "price" ? "unitPrice" : "maxSupply";
-  exact2(request, ["chainId", "skillId", field], `Skill ${kind} request`);
-  if (request.chainId !== chainId) throw new TypeError(`Skill ${kind} request chain is invalid.`);
-  string4(request.skillId, "Skill id", /^[1-9][0-9]*$/u);
-  string4(request[field], `Skill ${field}`, DECIMAL);
-  return { chainId, request, intent: intent({
+  exact2(request2, ["chainId", "skillId", field], `Skill ${kind} request`);
+  if (request2.chainId !== chainId) throw new TypeError(`Skill ${kind} request chain is invalid.`);
+  string4(request2.skillId, "Skill id", /^[1-9][0-9]*$/u);
+  string4(request2[field], `Skill ${field}`, DECIMAL);
+  return { chainId, request: request2, intent: intent({
     chainId: plan.chainId,
     to: plan.to,
     data: plan.data,
@@ -61644,11 +62992,11 @@ function recoveryReceipt(value, name) {
   });
 }
 function recoveryRequest(value, action, name, chainId) {
-  const request = object5(value, name);
-  if (request.action !== action || request.chainId !== void 0 && request.chainId !== chainId) {
+  const request2 = object5(value, name);
+  if (request2.action !== action || request2.chainId !== void 0 && request2.chainId !== chainId) {
     throw new TypeError(`${name} authority is invalid.`);
   }
-  return { ...request, chainId };
+  return { ...request2, chainId };
 }
 function canonical2(value) {
   if (Array.isArray(value)) return `[${value.map(canonical2).join(",")}]`;
@@ -61814,12 +63162,12 @@ var init_skill_local_flow = __esm({
       async recoverPublication(fingerprint2, context) {
         return this.publication((progress) => this.recoverWithProgress(fingerprint2, context, progress));
       }
-      async send(context, action, request, prepared, authority, onBroadcast) {
+      async send(context, action, request2, prepared, authority, onBroadcast) {
         return required3(this.sender.submitPrepared, "Skill prepared-intent sender").call(this.sender, {
           privateKey: context.privateKey,
           walletAddress: context.walletAddress,
           action,
-          request,
+          request: request2,
           intent: authority === void 0 ? intent(prepared, context.walletAddress) : legacyIntent(prepared, context.walletAddress, authority),
           onBroadcast
         });
@@ -61952,14 +63300,14 @@ var init_skill_local_flow = __esm({
         };
       }
       async settle(read2, name) {
-        for (let attempt = 0; attempt < 60; attempt += 1) {
+        for (let attempt2 = 0; attempt2 < 60; attempt2 += 1) {
           if (await read2()) return;
           await this.pause();
         }
         throw new TypeError(`${name} transaction confirmed but the settled chain read did not advance.`);
       }
-      async verify(context, action, request, receipt) {
-        return required3(this.sender.verifyPrepared, "Skill transaction verifier").call(this.sender, { privateKey: context.privateKey, walletAddress: context.walletAddress, action, request, ...receipt });
+      async verify(context, action, request2, receipt) {
+        return required3(this.sender.verifyPrepared, "Skill transaction verifier").call(this.sender, { privateKey: context.privateKey, walletAddress: context.walletAddress, action, request: request2, ...receipt });
       }
       async save(fingerprint2, journal) {
         await required3(this.recovery, "Skill publication recovery").saveSkillPublicationRecovery(fingerprint2, journal);
@@ -61967,14 +63315,14 @@ var init_skill_local_flow = __esm({
       async project(chainId, transactionHash3, bearer) {
         await this.api.confirmSkillProjection?.(chainId, transactionHash3, bearer);
       }
-      async stage(progress, context, fingerprint2, journal, stage, action, request, prepare) {
+      async stage(progress, context, fingerprint2, journal, stage, action, request2, prepare) {
         progress.journal = journal;
         progress.fingerprint = fingerprint2;
         progress.journalSaved = true;
         progress.phase = "transaction";
         const existing = journal.receipts[stage];
         if (existing !== null) {
-          journal.receipts[stage] = await this.verify(context, action, request, existing);
+          journal.receipts[stage] = await this.verify(context, action, request2, existing);
           if (journal.pendingStage === stage) journal.pendingStage = null;
           await this.save(fingerprint2, journal);
           progress.uncertain = false;
@@ -62004,7 +63352,7 @@ var init_skill_local_flow = __esm({
         journal.receipts[stage] = await this.send(
           context,
           action,
-          request,
+          request2,
           prepared,
           journal.signingAuthority,
           async ({ transactionHash: transactionHash3 }) => {
@@ -62178,7 +63526,7 @@ var init_skill_local_flow = __esm({
       }
       async publishWithProgress(path2, planValue, context, progress) {
         const plan = publishPlan(planValue, context);
-        const request = plan.request;
+        const request2 = plan.request;
         const fingerprint2 = recoveryFingerprint2("publish", planValue, context.walletAddress);
         const store = required3(this.recovery, "Skill publication recovery");
         progress.phase = "recovery";
@@ -62190,8 +63538,8 @@ var init_skill_local_flow = __esm({
         }
         progress.phase = "source";
         const selected = await readPublishablePath(path2);
-        const expectedSourceKind = sourceKind(request.sourceKind);
-        const mode = contentMode(request.contentMode);
+        const expectedSourceKind = sourceKind(request2.sourceKind);
+        const mode = contentMode(request2.contentMode);
         if (selected.sourceKind !== expectedSourceKind) throw new TypeError(`Skill plan requires a ${expectedSourceKind} source.`);
         progress.phase = "packaging";
         const packaged = await this.package(selected.files, prior === null ? mode : "plaintext", selected.excluded);
@@ -62206,14 +63554,14 @@ var init_skill_local_flow = __esm({
             files: selected.files,
             archive: packaged.archive,
             version: 1,
-            name: String(request.name),
-            summary: request.summary === void 0 ? "" : String(request.summary),
+            name: String(request2.name),
+            summary: request2.summary === void 0 ? "" : String(request2.summary),
             pinBundle: async (bytes) => {
               publishedBytes = bytes;
               progress.phase = "upload";
               return this.upload({
                 bytes,
-                filename: `${request.slug}.skillroot.zip`,
+                filename: `${request2.slug}.skillroot.zip`,
                 bearer: context.bearer,
                 objectKind: "package",
                 sourceKind: "file",
@@ -62224,12 +63572,12 @@ var init_skill_local_flow = __esm({
           const packageURI = entry2.packageURI;
           const manifestURI = await this.upload({
             bytes: serializeManifest(buildManifest([entry2])),
-            filename: `${request.slug}.versions.json`,
+            filename: `${request2.slug}.versions.json`,
             bearer: context.bearer,
             objectKind: "manifest"
           });
           const chainMetadata = Object.fromEntries(
-            Object.entries(request).filter(([key]) => key !== "sourceKind" && key !== "contentMode" && key !== "summary")
+            Object.entries(request2).filter(([key]) => key !== "sourceKind" && key !== "contentMode" && key !== "summary")
           );
           const createRequest = {
             action: "createSkill",
@@ -62282,11 +63630,11 @@ var init_skill_local_flow = __esm({
           skillId = await required3(this.api.resolveSkillId, "Skill resolve API").call(
             this.api,
             journal.chainId,
-            String(request.slug),
+            String(request2.slug),
             context.bearer
           );
           return skillId !== null;
-        }, `Skill ${request.slug} publication`);
+        }, `Skill ${request2.slug} publication`);
         if (skillId === null) throw new TypeError("Published Skill slug did not resolve.");
         if (journal.skillId !== null && journal.skillId !== skillId) throw new TypeError("Skill publication recovery resolved a different Skill id.");
         journal.skillId = skillId;
@@ -62504,15 +63852,15 @@ var init_skill_local_flow = __esm({
           bearer: context.bearer,
           objectKind: "manifest"
         });
-        const request = { action: "setSkillURI", chainId: plan.chainId, skillId: plan.skillId, packageURI: manifestURI };
+        const request2 = { action: "setSkillURI", chainId: plan.chainId, skillId: plan.skillId, packageURI: manifestURI };
         progress.phase = "intent";
-        const prepared = await required3(this.api.requestSkillIntent, "Skill intent API").call(this.api, request, context.bearer);
+        const prepared = await required3(this.api.requestSkillIntent, "Skill intent API").call(this.api, request2, context.bearer);
         progress.phase = "transaction";
         progress.uncertain = true;
         const submission = await this.send(
           context,
           "setSkillURI",
-          request,
+          request2,
           prepared,
           plan.signingAuthority,
           async ({ transactionHash: transactionHash3 }) => {
@@ -62558,12 +63906,12 @@ var init_skill_local_flow = __esm({
         const plan = deliveryPlan(planValue, context);
         if (!context) throw new TypeError("Sign in with Finch CLI before downloading Skills.");
         const located = await this.fetchDeliveryContent(plan.packageURI, context?.bearer);
-        const manifest4 = parseManifest(located);
+        const manifest5 = parseManifest(located);
         let stored = located;
         const expectedHash = plan.packageHash;
-        const root = manifest4 === null ? void 0 : packageForVersion(manifest4, plan.version)?.skillRoot;
-        if (manifest4 !== null) {
-          const entry2 = packageForVersion(manifest4, plan.version);
+        const root = manifest5 === null ? void 0 : packageForVersion(manifest5, plan.version)?.skillRoot;
+        if (manifest5 !== null) {
+          const entry2 = packageForVersion(manifest5, plan.version);
           if (entry2 === null) throw new TypeError(`Skill manifest does not list version ${plan.version}.`);
           if (entry2.packageHash.toLowerCase() !== plan.packageHash.toLowerCase()) throw new TypeError("Skill manifest package hash does not match chain authority.");
           stored = await this.fetchDeliveryContent(entry2.packageURI, context?.bearer);
@@ -62647,12 +63995,14 @@ async function resolveInstalledProfile(readProfile) {
     throw cause;
   }
 }
-function commandNeedsHttp(arguments_) {
+function commandNeedsHttp(allArguments) {
+  const arguments_ = finchOwnArguments(allArguments);
   if (arguments_.length === 0 || arguments_.length === 1 && ["--help", "help", "--version"].includes(arguments_[0]) || arguments_[0] === "help" && arguments_.length > 1 || arguments_.length > 1 && arguments_.at(-1) === "--help" && arguments_.filter((argument) => argument === "--help").length === 1) return false;
   return (arguments_[0] !== "wallet" || arguments_[1] === "use") && !(arguments_.length === 2 && arguments_[0] === "logout" && arguments_[1] === "--local");
 }
 async function runInstalledCli(arguments_, environment3 = process.env, authorities = {}) {
-  const profileFree = arguments_.length === 0 || arguments_.length === 1 && ["--help", "help", "--version"].includes(arguments_[0]) || arguments_[0] === "help" && arguments_.length > 1 || arguments_.length > 1 && arguments_.at(-1) === "--help" && arguments_.filter((argument) => argument === "--help").length === 1;
+  const own = finchOwnArguments(arguments_);
+  const profileFree = own.length === 0 || own.length === 1 && ["--help", "help", "--version"].includes(own[0]) || own[0] === "help" && own.length > 1 || own.length > 1 && own.at(-1) === "--help" && own.filter((argument) => argument === "--help").length === 1;
   if (profileFree) return routeCommand(arguments_, {});
   const home = resolveFinchtechHome(environment3);
   const state = new LocalCliState(home);
@@ -62679,7 +64029,10 @@ async function runInstalledCli(arguments_, environment3 = process.env, authoriti
     taskProtocolSender: new InstalledTaskProtocolSender(),
     skillIntentSender,
     skillLocalFlow: profile === void 0 || skillIntentSender === void 0 ? void 0 : new SkillLocalFlow(api, skillIntentSender, signer, void 0, void 0, state),
-    browserLauncher: new InstalledBrowserLauncher()
+    browserLauncher: new InstalledBrowserLauncher(),
+    callbackDelivery: new LoopbackCallbackDelivery(),
+    mcpLoginProcess: new InstalledMcpLoginProcess(),
+    stdin: new ProcessStdinReader()
   });
   return routeCommand(arguments_, application);
 }
@@ -62689,6 +64042,9 @@ var init_main = __esm({
     init_api2();
     init_application();
     init_command_router();
+    init_loopback_callback();
+    init_mcp_login_process();
+    init_stdin_reader();
     init_local_state();
     init_state();
     init_signing();
@@ -62852,6 +64208,22 @@ function emitCliOutcome(outcome, sinks) {
 `);
     return AGENT_CLI_OUTPUT_CONTRACT.exitCodes.remoteOrProviderUnavailable;
   }
+  if (outcome instanceof McpAuthorizationFlowError) {
+    sinks.stdout(`${JSON.stringify({ error: {
+      code: outcome.code,
+      message: outcome.guidance,
+      reasonCode: null,
+      retryable: false,
+      nextAction: "none",
+      state: JSON.stringify({ reason: outcome.reason, ...outcome.detail }),
+      operationId: null,
+      currentRevision: null,
+      currentEtag: null,
+      traceId: null
+    } })}
+`);
+    return AGENT_CLI_OUTPUT_CONTRACT.exitCodes.conflictOrPrecondition;
+  }
   if (outcome instanceof CliHttpError && outcome.envelope !== null && outcome.status !== null) {
     sinks.stdout(`${JSON.stringify(outcome.envelope)}
 `);